c452bf06059e431dee891cc0679b518fe44750e8f1f2b9ed184e8b25ec4e224c

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
15-06-2024 00:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ac541c1ddfcefdeddebedf5e5e8532b7_JaffaCakes118.html
Size

75KB
MD5

ac541c1ddfcefdeddebedf5e5e8532b7
SHA1

b287b228c279da2203adbc81e69007186f214217
SHA256

c452bf06059e431dee891cc0679b518fe44750e8f1f2b9ed184e8b25ec4e224c
SHA512

1ee2ed134a4a525dddedcb6b4ae9812f5e8e9db258be6472c194072a1dcc2e58e6c1f6e929b9ac69bb6eec41e11eef75c59ed538461bb5d1172a1a731b35780d
SSDEEP

1536:/cwONnAPASOAkXjVuRAkeIcsAluCH61CAk61YEgozKpLcPnnD00vkHeEexSi0C89:kwaAPAlAkXmAkOvlU1CAkWpzKpLgnnDK

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
23	sites.google.com
18	sites.google.com

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
636	msedge.exe
636	msedge.exe
1124	msedge.exe
1124	msedge.exe
3112	identity_helper.exe
3112	identity_helper.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1124 wrote to memory of 1644	1124	msedge.exe	82
PID 1124 wrote to memory of 1644	1124	msedge.exe	82
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 3600	1124	msedge.exe	83
PID 1124 wrote to memory of 636	1124	msedge.exe	84
PID 1124 wrote to memory of 636	1124	msedge.exe	84
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85
PID 1124 wrote to memory of 4436	1124	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ac541c1ddfcefdeddebedf5e5e8532b7_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe3e5846f8,0x7ffe3e584708,0x7ffe3e584718
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2924 /prefetch:8
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7964 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7964 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5176 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6900 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2212,5615783913556956630,17394787903993212554,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4780 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5016

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1500

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2220

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
81e892ca5c5683efdf9135fe0f2adb15

SHA1
39159b30226d98a465ece1da28dc87088b20ecad

SHA256
830f394548cff6eed3608476190a7ee7d65fe651adc638c5b27ce58639a91e17

SHA512
c943f4cfe8615ac159cfac13c10b67e6c0c9093851dd3ac6dda3b82e195d3554e3c37962010a2d0ae5074828d376402624f0dda5499c9997e962e4cfd26444c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56067634f68231081c4bd5bdbfcc202f

SHA1
5582776da6ffc75bb0973840fc3d15598bc09eb1

SHA256
8c08b0cbceb301c8f960aa674c6e7f6dbf40b4a1c2684e6fb0456ec5ff0e56b4

SHA512
c4657393e0b9ec682570d7e251644a858d33e056ccd0f3eebffd0fde25244b3a699b8d9244bcdac00d6f74b49833629b270e099c2b557f729a9066922583f784

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1ec5420c-4ed5-4d88-99a7-52dd9f29ab3e.tmp

Filesize
8KB

MD5
721ec309642dd54e39d7d06b82d8d2b0

SHA1
c206c50ccefae043e2ff590d388ba6d4ab215d9b

SHA256
17edc72126b1a1ea314e12397c6b8adfe573f933e0c4130250a2671afae874d9

SHA512
275e0afc64d7ec972dbeb10c83b1467a449b7a16182c7ab6d6fa6f6e030cf26b219beec3948dc7e5cd68d9424a76dcdb44814ce20fa0e0870d0a487a7719cdd9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

Filesize
44KB

MD5
23536ccfe05b737ae639fe63ee4cc435

SHA1
6d2e9822835dc3e6117a4d2addfc8f241fbdbc82

SHA256
6ae9edfc411ede03661a3d910fafddab3d6b313d1f4668dc8c5a84c5ab23a3ce

SHA512
f416e36b2322bbebd211fd1ea69c88883f00c7b00f14474a5fcce4a408840c0d1b0304eb8941509a38157d0583485f638959eb7d5b9ae668aa88c1d3eee8dd0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
c46f941640f9a30e09c62a6f1c7900c0

SHA1
12903b0e9df49f77aec4748b36e67a09f1d81be9

SHA256
711cfa48dd4265217d6cafd1896972355ef8d100adcb43c196a62642f39ff659

SHA512
8f59fb40f3a0cedc0d0cc366802aeadeb0d6e693ff1a69506d050b4f68436f56bf17309fcb007775d0fb3b9d430080317ccec5061f2fa98be6d8b6efbd1b23f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
3b3ada6eae469269ccdbfcec3db67e7a

SHA1
916caf947e3d05f0453b8a12ccc9b6ebb7d11f7d

SHA256
e80b324bc6f932db0bf51cac06d95b1913a77a4fd5c10679cf167a3a97cc8edf

SHA512
84b0a4b75029ad4367b4d2ca571e320d064e330cfd8af6273b3b9a27586db8197ce5a42f83d2f515bddbaf695367be545f20de59034f744ab3bf63029dce8efe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
b2f11eb54818b13789001dd924b2e21b

SHA1
8b9c509a42a43709d304dba07733afc1e9b1105e

SHA256
6c7a30d8a7984883495edb71dbc85f5285fcdaf0a0fa6924d49964b57ef0d6b3

SHA512
3339190a8430d314a879743a341f2cf5828358f5bb9614ab6caa1385b3afba22e101a1d21da0be9af07460935988a30560d522638fa372f1a9c63d3c4c9dc118

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
8375538fb88175f78877fdac4e48f7ee

SHA1
71a2dd5b927d5589fb813de6121da60da2ca31ea

SHA256
07b34d13409b9d4bb72f8924fd47aa39eeea5a0159f2f459a6e0e1fb5fbb0c29

SHA512
7977ab9b6ac1e4871be7a149c2fabb546845df55f48ef97089f3e1c5bb74731643394fb9e9585a06f8d5c7fe61016102b61eade492ff75f88fd2dccdfe819fc2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5aa77a8556a423539fc9c2ac736a896f

SHA1
3009f867e93306cec8a90b5f833ba916ff04a384

SHA256
1bd4d8ec2bd1ae77b8d802a2495b18caeae02f44e99112c1e62fbf2feae44cf0

SHA512
71e6228b42cc63a8a9778d92c92b42b3a81b441047c69d55e9e3b8036032991b70d008bbe86b604ba9230b46f4a2ba8737622beccfb621425a08058e7e92b3b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
5871cf538b66a2b4525e4fc76a0e2ffc

SHA1
a98d01a5d6f3e5a7130d7672fc828f3ef4e1a37c

SHA256
36ee4bc389a7f380352b8a2592ab60730f92209ddf1728f2e0caf1a6b555c252

SHA512
3d3f983d41b7fcfbd1598868b1aaa571154025682d90c54fee31aebbf573a398470d881839baa348f3c3b3f617f4530849392132d14a6f97cfafb388fb5e4b0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
9746a35b1feafd043b649cd41cf29b94

SHA1
b3ae8986d295167580574e5d585bc039ff149054

SHA256
bf2641f3808f3665aabcb8eeee820b3e21b51fd7f8425232ba842a5ba7bc4b3c

SHA512
816523ab85b5032984352f99ca509a80355bdbb49b0a3628c324d5a978c1ded1193096e0da072a458ad5d6fd7299f1cb8758ac7d3aefdecbb66e8b728fd546ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
873B

MD5
c181a641d7487db7225858a3b429327f

SHA1
ea02c3b5f904ca36dc518b85aea0dcef678c5522

SHA256
73fe5f81186403ed54e14707c19e568fb9f2b2f86d3a145ebb863b6187282bdd

SHA512
33b6164820a61f5e8bc3b2a053489eded92bbc749abbe7da82dda54d91ac05d4fe9f7ebf5830880dfb9bc32bb96a77a6eeede65845c236babb70a8c8aefcaaa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57b49a.TMP

Filesize
538B

MD5
83b179c489d7fe1fc150fdc4110c7c08

SHA1
d486e953cd2104e97d604627e9f1455af7267431

SHA256
a07183937aa2f6ba9cf4c444874ee596bf738412db8bfc84a82ac52e2850b3b6

SHA512
a0e32bb7955161b0d8faffb2de2be85bf81de394ff96c68fdee9444a033edf9d7aa9ba8493f08e7e61e0480335621cb0b690b90d230a6a187224acf9c27c4a22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
789696fa45f64dee76bb34edfc99ffda

SHA1
5c2f5c2512180cc24df59e44f85e7cd8b88de9ba

SHA256
b021488583060cf08bd31e80c3f3be5f83863f6a405ee1d69279618fcd213607

SHA512
9f74fcbca255d057d4a6939b87f2f32ecaa47db73ab7ae484236b5b05b82c740879ffbf7ee90baf2d67523cd75c9d883d7e12b88caf311f865a2300d94aad63a

Download Submit