abbd6af5dfa09b6667dc4f1f89174835efb1d43854ed6a15446e65fb9dfa9446

Analysis

max time kernel
145s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2024 21:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

974f4bc453584a372f6cbae515d41368_JaffaCakes118.html
Size

189KB
MD5

974f4bc453584a372f6cbae515d41368
SHA1

c6cbaa90a671cfe0c5019712503c23d282b35092
SHA256

abbd6af5dfa09b6667dc4f1f89174835efb1d43854ed6a15446e65fb9dfa9446
SHA512

6cc7713908c5d9a85b10058e8463d638d4b8f14255339970cf280df73512db17694f9007bfabebaa0b03beda5c872d1b668ce5531be496ff05c7d75d063f1616
SSDEEP

3072:7HHNGRh8zZTG4iFve63cabuH3CnKxEmZ/+4/0JAsuENGQ1uvj2O2Fed1qiEPWIPz:zHN2MzZD3QeekhI

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
1168	msedge.exe
1168	msedge.exe
1584	identity_helper.exe
1584	identity_helper.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1168 wrote to memory of 2128	1168	msedge.exe	83
PID 1168 wrote to memory of 2128	1168	msedge.exe	83
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4976	1168	msedge.exe	84
PID 1168 wrote to memory of 4236	1168	msedge.exe	85
PID 1168 wrote to memory of 4236	1168	msedge.exe	85
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86
PID 1168 wrote to memory of 4940	1168	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\974f4bc453584a372f6cbae515d41368_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff553246f8,0x7fff55324708,0x7fff55324718
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5732 /prefetch:1
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7144 /prefetch:8
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7144 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6252 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6304 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,4215558337305582263,55285171453586222,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5588 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3020

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4272

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3720

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3084

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7cb450b1315c63b1d5d89d98ba22da5

SHA1
694005cd9e1a4c54e0b83d0598a8a0c089df1556

SHA256
38355fd694faf1223518e40bac1996bdceaf44191214b0a23c4334d5fb07d031

SHA512
df04d4f4b77bae447a940b28aeac345b21b299d8d26e28ecbb3c1c9e9a0e07c551e412d545c7dbb147a92c12bad7ae49ac35af021c34b88e2c6c5f7a0b65f6a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
37f660dd4b6ddf23bc37f5c823d1c33a

SHA1
1c35538aa307a3e09d15519df6ace99674ae428b

SHA256
4e2510a1d5a50a94fe4ce0f74932ab780758a8cbdc6d176a9ce8ab92309f26f8

SHA512
807b8b8dc9109b6f78fc63655450bf12b9a006ff63e8f29ade8899d45fdf4a6c068c5c46a3efbc4232b9e1e35d6494f00ded5cdb3e235c8a25023bfbd823992d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

Filesize
41KB

MD5
9631c594f55c395f07b12046cb8fbf9d

SHA1
cd6532d1689166c19477923c73083eaaf8cd21e3

SHA256
a56a5d0f5f612bd39fb02fa1ff7a721a33fcb841f40c48757381b3b7c4a25726

SHA512
5d3bada46dbc583755c279b5ff3c155e15f16d51b6522752ab289bdb62b71abe1d91def5733ef7e77fc01d127508d07e2c67e731bde26a478c4780c8918ba105

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

Filesize
32KB

MD5
e8caf9aa03a76568d4dfb4bce1c070b2

SHA1
929a63300cc8b20e5d06dc052ec862b9b5df3a1f

SHA256
d6aba74a90bcbe4a59e6d0d336f0354327449ceb67ad46dc1cd0ac0b8258173b

SHA512
8e9f6d753624a0370581340612ace94e8c1c62bc64b0b4c39035721c6d088bf77b544b9f0e380c5038d0a101e8500ca8fab589c38ba1d1137df9d3f3bf140658

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\335e69ddec2b9ac6_0

Filesize
212B

MD5
ba6bc4de9601397d0611507a155ee119

SHA1
07d330505fc6b7ff6e640a0193595e4713ca9551

SHA256
32feb2287290e906cb52e4b1681b51caa2f282c163447cf9d03dc279c74a0d86

SHA512
427f5239d8bc9337d25dd40ef8c40deae082c8e354eb190bfaf9bed8911f5bc72c5a776d4d854c2cf1e9a6131e7e85df408db76f0ea1d8375ea5b3e04cd9c928

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e9545717e6d151d2_0

Filesize
212B

MD5
031060d1f188c7da522ea55c6b2d31b1

SHA1
a31921ed9dc780a89972db597d5bf57aae331ef0

SHA256
b8a32f2666805c92fede1669458ecc6308f48c8ed96a2824548239d3571752be

SHA512
acad9ae718d998377597255ab57ad67fa137a0dcd7b61c9f15b734677b150234081ba0620a2692928837bf5ebe28aa01763033ce7111cfa08e7720ac4899515e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
600B

MD5
97dcb487cf890d4bac81cf636c3d8cc9

SHA1
3a44aba48c5a7a4d5fefe9848facf1207ea9115f

SHA256
8664cd3606ad512454b491cdd40eb3483328d33dddaf098ad3522ff8ecf12719

SHA512
923035331b9ea41186cc9690e39278ea286cd173115074bec79bc6babb3fd3966638ce2f8e5ed18373764c40716b32e1ee12b923e6ab7fb38c976dbf7f5afb01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
576B

MD5
af45c68a957d7af919fdde45ab142856

SHA1
98d4a119db66f710a7c39d257d4ee2b7f87d15c0

SHA256
3f0f4db97b263e42943215d85aa8b3083f0c2b8c9d5dd0a4060b9a5837a8af29

SHA512
55b506cba20e53994a9b6287b3345a637d5a1c81cb71e769b6b734c88d5edf6853a863e7ba3d2df234d5f4ad1e5e2fcedc5cd0d2a42dfbbfb057ff53d5dfd685

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
5KB

MD5
0b8776b32c003de957697ec76ad6a93e

SHA1
23c76387802d7509851b789196d5d66984ea6733

SHA256
e4f61ad423e623328f49eeb455d6e5f92485ce52188fef945cb55edc932f459a

SHA512
932bcf426748a41f05d2ec53b4324471c2acb5fd55659b4cd709b9d32975d009a78bfd0afe1feb2f7e5c8333fa4740728d4c529c6745bcd7bda6507d4ce8ccc1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
5KB

MD5
5d2fc537eeea40e95a8ee746834ee4ea

SHA1
41c9c74877f5aa0374818e672d28ceb9882966da

SHA256
79e59beacc78ccd2d85e2329f28bce04d518e2967080a073a1b974c0c5a85b44

SHA512
53780a80eddf7e69d39f3303b91ef4ce06cdc9e814a649c30afbf22a2b0023cee02a48b58798b1b62ac0c7ed3d2fee0491b014840b5b21f6448158de44f7178f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6b0955c10669a77977fa9a08bbc18f2f

SHA1
fbc4045d626ac7bbdf80848a584c1a3424b429ff

SHA256
3582d777c5268940003e487b7af2614b73ab04ac792656f05acf72591b9f2454

SHA512
28ad61510764796fbff631b5adb88333f587e53ca950ca4ea2211fc8c52340abc5c167e42836ff069e7c90d692b523217cc184d46bea02868be6fcdefcda369c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
fef8b61c2e48b56742e20edd6d088daf

SHA1
3a6ff204615c281e33d14ea76ba5d268f8b159b0

SHA256
275ff086d7d4b438c45f2234d2f01dbfcbe860f1e9d48091d11e963dad7804d5

SHA512
3606a239782695288d0182b8a92d1c3ddeb2a81ffd5c17e85fb1aa44f62a2a2185256de455c8a8d2e1c045ad6b534eda28527aa4683e85d87c64d6b51fa0d35c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
83565da3a5a1913e6bf8c639b412150f

SHA1
762d5ff9ff9f9a7a51699c3edd74e0c2295730ad

SHA256
600f533600d13752a6ed321fc867afc1cd8cb071c7953eb5b32fd0854ff22ed3

SHA512
b9779bd3f3ae9369517b6120f9220fe1b6d8c8e6c7bb01a7b759b2ed64709c6f553d883ccbd0074d44ef3a6b5ee9f992342dd75c18f0bb1ef1b26597953200e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
3a600b944509e411386fe127c2b0464e

SHA1
9a77bcb275e3e75b515245aafb4ef9315812eb03

SHA256
936fdd500bb5a66455bfbfc3e256e706a1d82fc645dd5f988f741126d3aa6b55

SHA512
b6c61d6f0f6edcea9ce2e819060dca705421b7d79af250808b5fb3e047dcdd7f005fa20a240c8fedb8d0c7f6737297a00e0fe5a2755d9e2160aad7d9d2cd84f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
ee26ac454a3817fdc599409d448bbe09

SHA1
e863e75f1968ba24c8e3874834c5686bcac5626f

SHA256
28846f58aeb27d98415abe3128ee712d816d45d262e45c84e1c4b7574ceb1388

SHA512
fc5a6279fabdc982613a6f49322ca992fd6994f5eb6cd3aa40001910554655c1a3cf3f09beec6a9db1144fb70df5c0b6ea9c5e1664b69c859583d0520ef393f5

Download Submit