a4829ee06c0d0e62f3c8f5802d9a3d5c4b1cf9f42fd26851d9f5f86a3895f6fa

Analysis

max time kernel
147s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25/09/2024, 08:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f59db81441e727e210a798b45f29c47c_JaffaCakes118.html
Size

105KB
MD5

f59db81441e727e210a798b45f29c47c
SHA1

eb2b99e8c185600b16d4c4648c3380d327544b5f
SHA256

a4829ee06c0d0e62f3c8f5802d9a3d5c4b1cf9f42fd26851d9f5f86a3895f6fa
SHA512

f20608372446992a35c997a82644b9dc885108217aa3cab2d4807bf511ad0bd597a48cef466a427f32ed4be364f7e4eddfde6064733d2a6ad3ad5e64dcc1d9fa
SSDEEP

3072:sw7akAcjyAcFjAcKAcd6lIJxoFb/MWl8fIbxVHea:6kAcjyAcFjAcKAcdG

Score

6^/10

discovery

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
30	sites.google.com
41	sites.google.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4868	msedge.exe
4868	msedge.exe
2804	msedge.exe
2804	msedge.exe
3912	identity_helper.exe
3912	identity_helper.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe
2804	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2804 wrote to memory of 1520	2804	msedge.exe	82
PID 2804 wrote to memory of 1520	2804	msedge.exe	82
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 2480	2804	msedge.exe	83
PID 2804 wrote to memory of 4868	2804	msedge.exe	84
PID 2804 wrote to memory of 4868	2804	msedge.exe	84
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85
PID 2804 wrote to memory of 3384	2804	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\f59db81441e727e210a798b45f29c47c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbd42d46f8,0x7ffbd42d4708,0x7ffbd42d4718
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2824 /prefetch:8
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4016 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1724 /prefetch:8
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1724 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1288 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2400309060116210053,5424199665237483510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:4424

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5068

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4084

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
23KB

MD5
2f24e0f5d2c2997a89fb4a8d943c141f

SHA1
99515bde1a5bf72105116ac902ccf3db1dd3df29

SHA256
60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf

SHA512
0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
b02abfe8e325b02c13eb83dd712aab55

SHA1
7556b6e4f0670a1ff21716db97319ac996671141

SHA256
62e0691aef0b318f75727285b649c323a55cef591abe4f285647a6f8768faa59

SHA512
3e6aa31b22884ec49d84bb14513ffd1cd8e1eae7ea9e3eca4fc56a6204aab56588671b1df8449f41ec1f6c0259517ead66139a65deed66724d685337b8998d77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
0cfee267abec98dce2800ba70f09cf58

SHA1
6a11fbca1c6f155ee536257588b5403060bb4ffa

SHA256
476ac63fecfdd3ecdfade554711e2bbe32a2f5ec7c08977638f9ec2a25b95b02

SHA512
e306b89cbea4529e13e80bd18e17dc015dcaf9753845af8f42d73ab85c0b0f744f4d1087b7265a29697e5e932b48d676615a05f0e40ed172d90e834f59fb52c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
d61a8d225b95566494a825306b5f7226

SHA1
9c2ea95575090169fe888bc9c16a73411713a7b4

SHA256
5ea475334c391cc4a23fdd0a137bfd2d98d806e04a180d449bb1cd84eac5086f

SHA512
42321727da1ed769314bd8053a5aaff1cd6a11d80a83d0e95d0010c319cd61d89f43587a52f7e98fa0c27f0c22c487694d8aebe40b9c9caed210edba49d5d0a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
9ff25108977559412064391373b49d9e

SHA1
c022779eba11224246bdfde9cb4ded29c5ecd563

SHA256
a6b2fb8d56d5a8891371d9fa3c52054612db05948114f36840b4af7520b06670

SHA512
85126a0bff8125b3e951f077e21a5a5d69e9b621378ed4f4f90a437ff03935ff0f7991b63d108ff9fd3131346b7069ab50ac4220c3096d2ad4e34394d6fc622a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
96434cc57bab53700544c9c3581e6483

SHA1
c502e8ed81cfeee6e285b6bea0dbe1f8e295251b

SHA256
9f8d183085dbf48394e789eba1459af601a1f5131e210bdcbd6b67062c4c2989

SHA512
25d46acb43eb37cd9755f625e78da5223bc4625d170a553995c610bf4f3cf1c9abba6b2ef7b106a20e586624fa58fcdbc7916f44861ab39057f73d2199463913

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
b53e3456ee5e7c61fa3ac31321b59ad7

SHA1
29ef1f25c0e6a685c7a83e77a708b8e049f87593

SHA256
4e8ea78047fbf780d49679e8ca425bf5b98338471484d6ddfcf5d2af4387a22e

SHA512
61fb85ed1d32bb5f7072af6c8814c1df0b24886b795b6f28be20efc4800da0154a5c30728c8f7385fe97012f1ae575cd06733680245371c5d9932328b4e05eaf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
cfe433208ad1624828b3575bd14492f1

SHA1
a8748467347f07738c6a1a7be819cedcb958e8ea

SHA256
9c01e3170ae5415447b60df78bc0d7fb79be544eee41721390b9bf13d13ef676

SHA512
aa358ffb69c1fca664d8686ecd57249b9a3088ecfb18f951313028943c485fc8c8ea344a7d50afb3887876d89bd586a9209eeb2e87224895613e4088023c1375

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2e17a0ac2df3b5cc5a5b68b9e0475736

SHA1
c1b19e785fb127b8dfdc0898c6d4ec9eb4335adc

SHA256
1ecbd599ea173545e03e20e12736ca6bba3508a09933253059ced545bd633ff3

SHA512
8a996fe5cd1eb12128ffde08f664f130cc03dd403589ba0465caa2440e7cb5170fdbdeb45c72555fe15860eb05e8c6d10fdc082c4ce9d884d6d2c65ee26fe465

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
5a62aaa2ef0ae20ae819c557a914ebde

SHA1
aa95a7b6952d5fa7d678715bf7128673bed7a08c

SHA256
43ccd19d45b5ce1ab69ee5c0a96ee075f70684cd0ab36077ee6ce55a5935ba90

SHA512
47633305a413ba6269938e7ed4a8be070eab4a72331c67f394ee15a6aa92856a22b680bdcf25b88d66959b837955d0e140ced6b819bf84407f93e2b0e2dc0962

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
69ca06a0afb5d0cb8d8d6a6cdbe1d143

SHA1
54d7e6dae2efe6f869cc2224fcbce6082c813af6

SHA256
dc8f8544ab0f82ea2c8d63043f292939c244b8586c5d995c1347d5982544d8a5

SHA512
f0c88411d7bf3f15b49cdf2390b31fbe40fe36c3e9a04e0775587f3835c5b264cbce2055bfe17eabcb60cbe1b023f07998934d02d6d6642ebdd6ecf63a7e7e76

Download Submit