c59e3359f22cd759aeddcc111f2144da7c3f2ea75783d74917e332648f42825e

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
09/09/2024, 13:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d6607584bdc2da483ec86e69643cf511_JaffaCakes118.html
Size

127KB
MD5

d6607584bdc2da483ec86e69643cf511
SHA1

ecac495780bdbdb3d8f56418b7de4e35c9315094
SHA256

c59e3359f22cd759aeddcc111f2144da7c3f2ea75783d74917e332648f42825e
SHA512

d20d36be76eb7dcf2733026b11cd8f05b4c05ac88bd1e1a9e8432be06cf9d24847fee81a38e61748a962b7fa4a09cafbfcf34e1b9c60f647ac47cf49382676e3
SSDEEP

1536:LtfEOUgbjbO6QVL80E7sTWRfa7m6gblrd3X8ihZ69bsjcXmNRS7ODSdJuKiwR3FV:VNUcjvG8rMUcXmNRS71dJuKisVJH5PN

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
876	msedge.exe
876	msedge.exe
4364	msedge.exe
4364	msedge.exe
3940	identity_helper.exe
3940	identity_helper.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4364 wrote to memory of 2724	4364	msedge.exe	83
PID 4364 wrote to memory of 2724	4364	msedge.exe	83
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 1004	4364	msedge.exe	84
PID 4364 wrote to memory of 876	4364	msedge.exe	85
PID 4364 wrote to memory of 876	4364	msedge.exe	85
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86
PID 4364 wrote to memory of 3764	4364	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d6607584bdc2da483ec86e69643cf511_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbf51a46f8,0x7ffbf51a4708,0x7ffbf51a4718
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2664 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7068 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7068 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6492 /prefetch:1
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6468 /prefetch:1
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,4327546251668673456,2535344010962966915,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5220 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2144

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1900

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4132

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7114a6cd851f9bf56cf771c37d664a2

SHA1
769c5d04fd83e583f15ab1ef659de8f883ecab8a

SHA256
d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e

SHA512
33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
719923124ee00fb57378e0ebcbe894f7

SHA1
cc356a7d27b8b27dc33f21bd4990f286ee13a9f9

SHA256
aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808

SHA512
a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

Filesize
24KB

MD5
d1c8fc93e329cfdb4cef6b1363e40db2

SHA1
2d034d8d0056a8c1596714c7129fc31c74a2565c

SHA256
facc5d448f6e3267100a4c236f09aa98bea1cc3b19e2b2a0985501ca499c4ca2

SHA512
07434e4af30064d5f67158d10b704afccaa31f974ccaca5e76dc9f1b05d76106b44f124c3a94af93eb1b44a5aeaa70ebc33e0f9f904d1cd4c8386b281735d008

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
23KB

MD5
a0423f1305547bb6b8f5a4fb1a9fc2d8

SHA1
092dcf1fe57e6bb53821eb754e04188ee70602d5

SHA256
6add651cb411ed9ce9a17883c1522920a6ee3b4eb676f5b411e72d1a5e7de6e8

SHA512
b8487c60b40d332e562cc5d4fc7c515e3b3c2c82311700b788905754c1376ce6f0da650583545a4691d51f04ec5da0c0204997214d167c85b788d4c85236c4c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
e10c39187ba9db6133623bb2574917e6

SHA1
aec52d4bd9cdf425bd74c7f0a4284c10821db97d

SHA256
4b7309274a26f81056c36c0217f583f0e3fd2999c9ba84df8c61979c3cf0e228

SHA512
4bc8af8da6c9266c5ffbaf2dcb67109881b182a4b5d766db4b02717aaec1aae4de29aefccc38d611c278b9a9c2ec58704ed35ddb729540eccba61b03d5188edc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
7f847e5a9bb1936c77d008058224c0b7

SHA1
bc36a488715e5ecad739a9fe98ee88fbc2f3da8b

SHA256
776098717655ad2ca455e95d1acb27481d1c1fe7c78247086a6295dc5fbf489f

SHA512
40daf77dae09cb7ba2742f516d9ea5ecc70f23d3ddf9b2b843b4b7d4c6e7b16110abe83959f3a19fbc5d6960df9a44ef0aac5511f8ecb299fbad895cf678acd7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
00f4b03bffb4afa6e8a4ffc046ac1206

SHA1
8fcb0ac506d3a203e9ca580f7a598606d62b00cb

SHA256
0536a6c3de9d15dc1bbdabb8a54dbd77cd06a6dfdd06c7fee9c4abd922e561b0

SHA512
da7da23ca51bc7023437b038a5bdaec0ab64847cfdd8a5e39445f1f09eb44cee3f3859b29100ed06f36c8d709e591918a811cef745916d824ce5348d5fefc253

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
0f62e26ff4cf2be40fda33cded7019bd

SHA1
4146c61cbffbc637eadbc27ed18e85750fa25358

SHA256
f0cf8204779a5e47d01140a6a77cd38544b21ca9c8c77be4c5725d2633cf404b

SHA512
f71c5b7e375b9f24d5029a43e3a3651ff8d13957df6155687eac0c6cbc88b46c01e4678840dc18fea17cd465328ff7f1327c8a47d5c2fa0a2b1365996869d016

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7d9ba774de8f30512488d1415c310cca

SHA1
2ed412c48761e1b26ebaf237430668781759e8a9

SHA256
3c3c45449e914c3a9f9f4382183b9a7e0b4892c7a3bc0e8ea251e6d1b02f5605

SHA512
0a7fca8a4a6babf85586fcc9952725be4c275306d56063859adc0f0cb3684c86c18ef6e6f4916e4e0c8c0fa2509f7901e89303345ee2d58d272a8cd2db82bc46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
52a4386ba4ccfdf9f2096944872ebaee

SHA1
1072d6abf33ecd80cca6f7f0a45aac09710ff584

SHA256
a42f91ed7219b4b82867041e927f57cda4b924d971b2a2d9e5d51749e9451870

SHA512
640269a3f92bef7e606b2caab5b455c2648114dd5c0758d5ee3cac19c94e4a0db6683fffc9babcd34e6c447221292773068a19165855b72eca7ca8f72be0294d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
39c7c02e0b369a41492d3d85ab716ac4

SHA1
7d6e2d2f674c2fb220588c7b87d1562ed14f472b

SHA256
1e6771935005f7dc84b4d635d91fc1019fd59e164deebccad40ab4e702022e45

SHA512
d5bff453fbbc1619d0e058300543b221523335a51c8be36ab85d63fda29a8353022f0bfc614477cbf1c08ec2211e5470b5ba5fa08e04d0a2df8a7e2cef7041ca

Download Submit