14ed056c9afe8722a0bb6cf85bf25d5a2fe9312c74279c126cdb92d06e96aa21

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2024, 01:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ca49ab2dd298b485eaf8932f232f84a9_JaffaCakes118.html
Size

86KB
MD5

ca49ab2dd298b485eaf8932f232f84a9
SHA1

2d4b7700787fcfb5326f5c8c5311b5136d8068f4
SHA256

14ed056c9afe8722a0bb6cf85bf25d5a2fe9312c74279c126cdb92d06e96aa21
SHA512

901e5502cb23dbfa38e00798c3c4d2aed8337cba333bedc51418b1df900cc70bcf510eff1956b3eba0f3d954075a0bff971fe9f47136ca880332a3db8ba5e59e
SSDEEP

1536:UmDDOHH2JxUu4hnxzZSdeWdOcgRjK2EG2yZrcJ09ZrcJonZrcJ3PANfx7sY:Um+HWP94hxzZSDCjOvJRJo6J3PANfx7l

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3028	msedge.exe
3028	msedge.exe
2524	msedge.exe
2524	msedge.exe
4580	identity_helper.exe
4580	identity_helper.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2524 wrote to memory of 3140	2524	msedge.exe	82
PID 2524 wrote to memory of 3140	2524	msedge.exe	82
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 1232	2524	msedge.exe	83
PID 2524 wrote to memory of 3028	2524	msedge.exe	84
PID 2524 wrote to memory of 3028	2524	msedge.exe	84
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85
PID 2524 wrote to memory of 2216	2524	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\ca49ab2dd298b485eaf8932f232f84a9_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffa65946f8,0x7fffa6594708,0x7fffa6594718
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2668 /prefetch:8
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2172 /prefetch:1
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6756 /prefetch:8
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2236,8891731532773240977,10116133170440308692,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5136 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4120

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:412

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4496

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2232

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6960857d16aadfa79d36df8ebbf0e423

SHA1
e1db43bd478274366621a8c6497e270d46c6ed4f

SHA256
f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32

SHA512
6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f426165d1e5f7df1b7a3758c306cd4ae

SHA1
59ef728fbbb5c4197600f61daec48556fec651c1

SHA256
b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841

SHA512
8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
41KB

MD5
9631c594f55c395f07b12046cb8fbf9d

SHA1
cd6532d1689166c19477923c73083eaaf8cd21e3

SHA256
a56a5d0f5f612bd39fb02fa1ff7a721a33fcb841f40c48757381b3b7c4a25726

SHA512
5d3bada46dbc583755c279b5ff3c155e15f16d51b6522752ab289bdb62b71abe1d91def5733ef7e77fc01d127508d07e2c67e731bde26a478c4780c8918ba105

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
456B

MD5
02488f13d36e769fff611627b327fdde

SHA1
ed46adb4810bb290f7c31ca9c6805e6712788e0d

SHA256
5fc0b5582ad618a87d6bf00243addf929bd9c29f8160706cd041a23b8eacc6ed

SHA512
15e1f4243c86c54c461b054f9b9224cb6873baf44897110174d09f1a5d6df3ca27b98499ba5bf064ebea517f518ade9e6fc5b712398d1d13a4f34c7d186e21b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
3c5f79dae978a4de3f4581bf5b1ce62f

SHA1
3ce88dce38b2fb662db2da421f9358e19016da26

SHA256
3fb667051740a91eb29f93edd9540e268ee09398add4a6113c663d10b59cbf6a

SHA512
71ac33222ef39b1ca61cc75b52b339bcfee9a9d8c503349a4544bde3c2b836b6fc843f4c849abecad360953b321a5b3772c757c02ea61e4cecb9d9cccb1bbf0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
1fbfba5cf0247c76746fbcbe539dda9d

SHA1
db53a126524f3cb71bbf31b36e4c8fdf6fed0d9d

SHA256
ac1fedc80a6ec8c4554775e7cc71572d85d27b8d290796b354e293635ef6dbd0

SHA512
d2505c48de75aa4c80bedfc000e8feb9630aecf2179896c852b1e64272738d438cd1ee787182e767145001a34fb53657e81fbcdc9fc0e9e53264fc03727cabde

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
d9059deb97d3371b0336699a7f86d0aa

SHA1
0583fa8d4d68c700f096f8cd121eb7a7ad326a69

SHA256
03dbd70385b06b54ed51bfbce8bbffa537987260dca7d45625c8ce6a38f3467f

SHA512
2c7754d9d412b7b88adfc698e35e658f70d656bb86d7bff253e4ea4b9b3a0515d5cbc7066232956a21be0e340c757860f2a841c63e1a87f6d44a95340ab31963

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
c9e112a16404134a84c394b410b99122

SHA1
bd8eacf5c2bc5bb491c3d89ed177e0c60962a469

SHA256
d755f0f7ca5c6221dd44025f4cf77a9d64e0b589879433963d42a1fc8ad3cd2c

SHA512
62a01e72b33bde95b50d205544e898fa562ef46afa09f2e02a13ba7c0090c823510aaf665d42a570262049798e5b2b07df5213e4868879e31b97ff542b4c350e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
db2a2183a23fd83ca3f43c501cb04bb6

SHA1
b4b2b122bf2b3d916b64a4a6d9bf5db63e945544

SHA256
970ab8149943516a66727cc8501337e748fb8b98fbcd51a543eb7eccad71af73

SHA512
f47890704e6fec8b8a7f32fa0d44fa7a605342b99abbc864149e612837e49b60c522e02fd757fa959b4aa356dc28bb98d44f0a06aa30718ca0d1284e06484a38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
b630125f8afb34f33432492e66fb0f20

SHA1
2ae09896f11e2aab0ec87129c33f2e8dc605e312

SHA256
59028f490977c2a32749ccbbdf0d672485f7925b609424ca6a855c9ad8c14647

SHA512
033554e17109189fd7177f91ba8866a7ff1bee5bb473dd06dfc8f23dd9355fd9e398b72d9f48fa47b7dc903b16f4959486535078e840dd642520fb2a23297248

Download Submit