6d219372f0a8a8727d5c6ceeff0d09fe887476bb4f89ae69fa9a0f04034309d0

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2024 06:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eabed6bd543c63a5516267a1b6ccb7cb_JaffaCakes118.html
Size

34KB
MD5

eabed6bd543c63a5516267a1b6ccb7cb
SHA1

b6eabd130e6783c74a5d1110a40b4f8bb4f20d43
SHA256

6d219372f0a8a8727d5c6ceeff0d09fe887476bb4f89ae69fa9a0f04034309d0
SHA512

08a54ff7815c3c7d4d623c638b86a47107162e844fa11e47203f72867d9d4e27717acd3aebabaf99453ee8be94e20ba10680f07330f13b07431fac732bc2520e
SSDEEP

768:2OXWlMnqn6MNlp2uPKOf+TbGbcu/rhDGpNynKrZKrQiK7l3vdlEDH3m8:2OXWlMnqlp26KOfybGb7rhDGpNyCsxw4

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2824	msedge.exe
2824	msedge.exe
4412	msedge.exe
4412	msedge.exe
2704	identity_helper.exe
2704	identity_helper.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4412 wrote to memory of 4904	4412	msedge.exe	83
PID 4412 wrote to memory of 4904	4412	msedge.exe	83
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 4828	4412	msedge.exe	84
PID 4412 wrote to memory of 2824	4412	msedge.exe	85
PID 4412 wrote to memory of 2824	4412	msedge.exe	85
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86
PID 4412 wrote to memory of 4688	4412	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\eabed6bd543c63a5516267a1b6ccb7cb_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x108,0x10c,0x110,0xd8,0x114,0x7ffcd73946f8,0x7ffcd7394708,0x7ffcd7394718
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2708 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3732 /prefetch:1
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6832 /prefetch:8
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6832 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2052 /prefetch:1
  2⤵
  PID:932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,7671656252823340764,17974239915489828984,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6988 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5064

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2968

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3952

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
23KB

MD5
ba16446d3d17a4f4aa3c0880fc626139

SHA1
dc8508bb58c7fd75a075be5b1948f482691d25c0

SHA256
83c4e32b4545e45bd3e673698c9c905a7f9ce02ac5c08642e5ccdf2624c7a35a

SHA512
4f9025d959fe3dfb874baa5765d9b46d8b042b6772a4f79e5d56ba4226b872fbca5eeb60ab93c3c247445e879194cd787de7eeb4cef8654ba0452a8601e05711

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
45KB

MD5
ede70f717200a59b4cb831635de913a1

SHA1
d4d6e893ac192b5df087e924ab3356852f8a7bc0

SHA256
c63fbcc69de230e4844cf735ccf668eeaf30e42126eeb464da39c2de6b0b0051

SHA512
b621bde28b90ba97c122677989d994cb5e88fd0906366af1a23ad3f9d9f3b7f2bbef95873f29100433d4068fbbf7ab798505e68deefc118097fc5f76dfc4b672

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
720B

MD5
5d3bdfc4e5b85ede8580eddb37ca5edc

SHA1
df91ad736f0958445c8e868fc6bbd1208940f4ee

SHA256
10d4f3ea7af57e39819d3a1017d4a53184f1f22988a4ea8ea93c80acabb2b6ee

SHA512
340cb25b713cf438b0c4342c3f4816667684023fda564e046d8df426e9afc6036b6ab3e8709b58a7c101e1c9686e3ec3954ef943623026d1fa38a312fff185ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
696B

MD5
e7fb8b307ae9d348f2c2e14afcbba4df

SHA1
3913747cea65b45a357953df40f2baa6cef9d3af

SHA256
1c2de9b49e0ab34eab2bf17159ea0e0464e152113ed0e185032623d7d141085a

SHA512
c0a83f2c4941b6a04c66b273f80dd62ae47b7da415cec7cbaa3a803303b076894e928bb0c49825b37ca2d69b9b01c5cb03789a6d30e0aeb26c62d299a3787d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c49b73baf25236ce3e06c2853dedb8c3

SHA1
5a9a5c746df26abc04abc5eee692c4933f56a0cb

SHA256
96c417d984b250442b2f8cfe3a5301f6daf8743fc92577797d565e1c435070cf

SHA512
4091561cec6aa1c0533c76f729c30cd9a122cf70f84f6edef36f4d25a566254a6854200efeae97f77ed0466de9a8c21d84b7fbc6d88d7bef53c4cb89b6b5e991

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
a15e6edae206833a45db2060ad0b4207

SHA1
8fbd11a16a82f5e753b3bfd101fd4dd6aaad10b8

SHA256
6175217defefe27911f229d315166c4ec955c469e73548b8e10207c52b42ad0d

SHA512
c7824300801c949f7b51520f50e636b1c0476c9463cf9ddefd66a9f7ab3e2365f2051cc42cef26c97c87f82a317e6dcba8f6797b9260573a2c1b3f68ec37240f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
341eb36d310eda4a66ea7face6baf1e9

SHA1
12770eb68e8866ebf6e4c860013f667e70ad74ef

SHA256
c09f85cfa23637999942751864fc01ad6cd236b00643dd9910ad49e3562fe33d

SHA512
6f7164c810a4634151dab36bb3c94d18a6991f59efdf2d8a05acf0a8178c0a62557da321e538ba42b304112b7073fa2954c0cdb060b888c55139e8a4da346472

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
462bc11a9ada1baca4ffe45710bea0b5

SHA1
30c16ffed94c23f92a313360d7c3dadc8198b477

SHA256
7153248590699c795e7d373e2c19e1bd8f4b4901a8fe24dd10ef6916800a0173

SHA512
6bfa4e555b4b4d769c4b23ac2659d88310d1f005b36a48e83885d9ccc3c190bc57aa3ab4860106e2815a6aa08a756cf2a0375a4a902d6f51df3ac778196f54e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
aab931e0292c2273fe99a60b30786811

SHA1
1bee694cc0fb907be16a8a9f909015bcf886cfea

SHA256
72da7e492740efc20b12453a5aca15dfbe5673e2f9aef0932fbe7b8fad50a56c

SHA512
0cc47455df07f16de4626e0760ff5b9cc3d6465a904265620eb8c040cbeb73d68fab606530b12440324404b97d26bd0afb2b78930d71958090c6a984a60d5c10

Download Submit