daab2cc4e2424c8ffbd3b41c8c5269f9a41b998344761ab20606ccfa73d2094c

Analysis

max time kernel
147s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
02-05-2024 04:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0d8237928ee0446324cb2d411544b864_JaffaCakes118.html
Size

81KB
MD5

0d8237928ee0446324cb2d411544b864
SHA1

2ea0d7c94b1f07f9396c9e96d277f6c327577d06
SHA256

daab2cc4e2424c8ffbd3b41c8c5269f9a41b998344761ab20606ccfa73d2094c
SHA512

122659cf67c32bbef820d668fa8dd8f4d2d15fb710c3cfa6e70872b2bd4c5088a8f90544895b8c362560f7cf8b6ca9836e1019e4bbf843faa018701011e8708a
SSDEEP

1536:AHqs7UsJh5orLpWU72o4yUaB+Bk4Iz6d3YLjHj3pl8wtuL:sqEfoBWU7jUaKk4IzLLjHjswtuL

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2264	msedge.exe
2264	msedge.exe
2940	msedge.exe
2940	msedge.exe
1912	identity_helper.exe
1912	identity_helper.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe
2940	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2940 wrote to memory of 1468	2940	msedge.exe	82
PID 2940 wrote to memory of 1468	2940	msedge.exe	82
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 3832	2940	msedge.exe	83
PID 2940 wrote to memory of 2264	2940	msedge.exe	84
PID 2940 wrote to memory of 2264	2940	msedge.exe	84
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85
PID 2940 wrote to memory of 408	2940	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0d8237928ee0446324cb2d411544b864_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb1f3c46f8,0x7ffb1f3c4708,0x7ffb1f3c4718
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2700 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1336 /prefetch:1
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6504 /prefetch:8
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6504 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6264 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6152 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2184,11025902205369638015,4350261505273587612,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4816 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4420

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2040

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:640

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2daa93382bba07cbc40af372d30ec576

SHA1
c5e709dc3e2e4df2ff841fbde3e30170e7428a94

SHA256
1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30

SHA512
65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecdc2754d7d2ae862272153aa9b9ca6e

SHA1
c19bed1c6e1c998b9fa93298639ad7961339147d

SHA256
a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7

SHA512
cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
20KB

MD5
397383c90a2d930f866f405747e27466

SHA1
7bb6b5d6cee104c877dc5c3462f61232ffe5b360

SHA256
a67db01d19e15d8fa76e5a075e336e195325d79d277a83aadb6a440acf887c47

SHA512
4357eddc0581e3cd6209646540bf59756cb4035d7dba47d5cb6b0050e6c202bda65721d4e9d644f37e3cd105bc5fa240574cfa96649f01e2769b796b523e08aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
6d33f0b085f3074870e1eb61f7018434

SHA1
6b20ad1197cfd21a131084da89add4909f7559bb

SHA256
ded2f2bdd63cf71969414b760418ee2f90bbeb1d22d840660b7a54f7dc1c12ff

SHA512
ebd7ef183bf834b69471da00586c9e437c2f7b81b5a40fa53f1f85f97a9b367f041363010a629eff6531e3ae8b177fdccea7ed6cefcf49de20441cbf7ca15e9d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
528B

MD5
478eda97b6de634ed7a727930461f73a

SHA1
9ca0682253c5f609f57c81c5b9f44a5020519ed5

SHA256
54b9e6f936e3ad846a1371989cf8a162bc18baf12cb731145a40ff37cdc8ec1d

SHA512
b2e1dcb83d502359cc825b5ae182d4179528e1cae32e1c31723e18ca56fb00e88422b0dcbf7e0a41639305652b2bf99c48f69aca0fc95e77b42a27a9dd73ec00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
552B

MD5
571eb66a4f90bb052f1f0bd49593a62d

SHA1
d23c224eb8f13cb5a2119283ee1dc2eaf89dabe9

SHA256
468a58b7e25ee6d72a7b5ec26efa3a401ddfaddbf942bebd12409c26692cc3da

SHA512
979b385be382845249099c5dda552ea34b806b0360f79ac561f371b7edcafcaa912ba8aa9cd0c503d52e7b31ca6ed67e6d428ad578cc46a6deabeafa5b3d99f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
250ed60979186fd9d698ec6f650a49f1

SHA1
cad2b64584ec9fc9429d509f7bf5a76509d83bd8

SHA256
b22dc4d202384d5b994cc81f9731cb544f1acb58f8ca9cf672c9a963008ef37c

SHA512
6857f0ab404a3486d56c8b9de41ac44f1bd509ede533fd9ec9b71e078115aac29e367b97b0502213bdd10d835959fd8ab0185f6b439d4a6e75adb08e5eb96a34

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
d8578cd44e44292d5a5d1afcb82e8ba8

SHA1
724169a4886ac77b4b5592cb6e54ee4e12366c01

SHA256
52fa9a54a7837c5134ca22191a0dd833b13e6e3d50a306ceeab1b7b18f4bcbbb

SHA512
d23722f20f6ec92083761d0f2d95816727711a03a58b3118c5ae78185e75fbc3b36fac7108e300cd9e53b27ef21dacfe77598f21d8a2293331559f64c9a5bb3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6718aad92c6843c7392daf56463b15e6

SHA1
28f6c0ab5d88467e518b26aa100a86ac89b16683

SHA256
15ccc4543c77ca072fe17f14420cb3831c71209f7c0454550898981d430d58ea

SHA512
7a039209c72187b228e5c615bd9d9b52ca0a9c34cb57dc0320a8a588e63937a65b087d614547e7ec60a0c0f9aa27952005da01f2da98d0a50571d195e1d78ac9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
ab2ca778a4cdf6c63f6191c93afc631e

SHA1
c0b84216a3d0d1183ea6841a07ffcf71d9e405ba

SHA256
288c4387f041bfe365039c4a06599e99bca3f4b1ae12e07000936656b766d069

SHA512
9775952b3fe4071965a8125b6f9608fa014500c00b17a5d61c6de36a1b9ae9065a883f8f825ca61f0a6bb2aca020c72ce44c85f6351d98ff0fcf75f6a7a2b6fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
dc529224e7643ab29d3c3b118c5ba744

SHA1
d71ef0056ada19d5a2a527d2098dba8f9844404a

SHA256
28a18c4f60049fbbe88532ea675e62c34b4f7279a9519b475dd6c946b57a3f2c

SHA512
a141a7f124bc1aa99f08d268911598b2c8d2e54a78adbcc334d01138ba62444568a63193ec03d72fae6df1e448ee57ed4a0314c656d9bf38db35b58fa4b6f3fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
48f78c33041a36f50d4704644be3b45e

SHA1
835f11ef3014cb5540efdc5f3b0c165286958715

SHA256
6803603c3014f782f3b8057cf2d4451aa6bf8da97941e2b26e98ead24377c44c

SHA512
f9d90b1a133212a490f259e56cdc1f5ae943aafd098c9933a42c39a3396b458287632fa275923d7d8d27576ac4f723fedae772720195073701fa666a380beff8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
5da058b13c25e7fa91691dc94284b01c

SHA1
4c31a947e8f53eb88d9140228b0a72ebb0d7deb1

SHA256
1b22bfd3fb16d65a9c1c8bc56c5a58e847592439b5b2b1e995e97ab16be95e02

SHA512
a46d825ebd5e50b5730ad7ad19e619c381a9dc4ecce46f5c59ebda0b7d8b5765097b64b835e39889c3c586d9620e89b3ed9b2147e33cb1b87e7d6ef045385b7b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5816a0.TMP

Filesize
203B

MD5
29f1a8d7d346ac67f5b4243dbd7e4e95

SHA1
0267121780c0c5c35f7bda311d698a4e587050da

SHA256
a80971a7a860719114ca7f2baf510438ce7adf682aa83054f5929230de223b4c

SHA512
eec21e1097337c762b193561502e278529450fafd6b96de37e29763db7248fc16dfaf3ac384efec824b59fe3295ec2823f72e7e3ee8f46ac4934e3f1c845c166

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
a2b7cca525154612f11648190e05beaa

SHA1
bcde7f376e2aa811f161809b77ab4255c6784952

SHA256
b806e2dd21059296d9502af7bdcc629d608fb13a5b058b3a02bab83ef2116d77

SHA512
0bb0cb94e653392ab5a883e51686fdc100e740352e29f0bc5e21cd82fbacdbfd51b5a01625e10716d41f960f0db6fda2854b9c06c78869e4302e53b21ea816fa

Download Submit