b5869354350133cdbeb438da6210e793ed0d46fd05461678130960e645ba9840

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
21/05/2024, 08:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

62a9a65d99aaf3efd13e981bb93ebcb6_JaffaCakes118.html
Size

56KB
MD5

62a9a65d99aaf3efd13e981bb93ebcb6
SHA1

e82aabcb5f74f0508228df2ac102bbdad7d55229
SHA256

b5869354350133cdbeb438da6210e793ed0d46fd05461678130960e645ba9840
SHA512

eaf424c429011df1f181d3726729ef2f0b47ebaa79d25230514b296030c59ac5168664f20b8d226c8676bdf0739363d09ea67d577f807ceccb4a7a6805795ee6
SSDEEP

768:PFuT0EipBTGrHO1wOG1P1Vja3VOAzskZWyDH1Zvmc6oRA2aasm:MTupBTGDO1wOALja3VOgskZv96oyTa

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
2684	msedge.exe
2684	msedge.exe
1696	identity_helper.exe
1696	identity_helper.exe
3216	msedge.exe
3216	msedge.exe
3216	msedge.exe
3216	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2684 wrote to memory of 4332	2684	msedge.exe	83
PID 2684 wrote to memory of 4332	2684	msedge.exe	83
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 372	2684	msedge.exe	84
PID 2684 wrote to memory of 3012	2684	msedge.exe	85
PID 2684 wrote to memory of 3012	2684	msedge.exe	85
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86
PID 2684 wrote to memory of 4288	2684	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\62a9a65d99aaf3efd13e981bb93ebcb6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8354246f8,0x7ff835424708,0x7ff835424718
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2824 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2168 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6684 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6684 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6680 /prefetch:1
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6460 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4092 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:5284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,8509126240016177179,12938870131039448413,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1808 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3216

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2368

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2452

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

Filesize
1KB

MD5
55540a230bdab55187a841cfe1aa1545

SHA1
363e4734f757bdeb89868efe94907774a327695e

SHA256
d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

SHA512
c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

Filesize
230B

MD5
f993aebb7eb477abcf75c17715104f32

SHA1
5f03433c5e26b8025802298714a67aa9b6a8ef80

SHA256
0ca1e540bed42d8e947bd46c117f7e0e396baac099743b80f457c00cad4a56e2

SHA512
fa8888de0929a6b41c38aecafc7a286a4b4a27d13e20bbc93b46cc612bb44e7ff8b716e019003478efd281a237a26277cce51e5f17fc5b8c0f78827da2e37e30

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2daa93382bba07cbc40af372d30ec576

SHA1
c5e709dc3e2e4df2ff841fbde3e30170e7428a94

SHA256
1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30

SHA512
65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecdc2754d7d2ae862272153aa9b9ca6e

SHA1
c19bed1c6e1c998b9fa93298639ad7961339147d

SHA256
a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7

SHA512
cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
44KB

MD5
88477d32f888c2b8a3f3d98deb460b3d

SHA1
1fae9ac6c1082fc0426aebe4e683eea9b4ba898c

SHA256
1b1f0b5ef5f21d5742d84f331def7116323365c3dd4aec096a55763e310879d8

SHA512
e0c0588ff27a989cac47797e5a8044983d0b3c75c44416c5f977e0e93e9d3a9321b9283ea077e6dcad0619ac960ee45fe8570f1d5cc7d5d4117fee4f2f0c96b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
20KB

MD5
b6c8122025aff891940d1d5e1ab95fce

SHA1
a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4

SHA256
9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e

SHA512
e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
0490d02726292c667cee5e3655dfc2e7

SHA1
a950b0bb230dcfa33b164742c25aa13eea507ac4

SHA256
691ba901658052c501eff7360858bb636de0f914ff7bf28355f9e67031cf3a4d

SHA512
b3bceab387984ab90a32ec35258774b357704366de1dc1db8a0e45ab0747f84e9b5727960d8af711efaf271df6539c1189c5a450536b14a9c860592c0d4d9034

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
62c9aef21228508443b3dd598ecd8441

SHA1
b23f3db55cc094cd103232be6899e94bf9217210

SHA256
18c43e74d3d3a5e511848c06e67cd8ab4a0499d076660538445959b2b2c29aac

SHA512
dd29def1d6416781143e13ad70f68ac655abc098a187879a263071b3b0192260aec765765689965848e2f2133ac6ef5bbe6ce71c6a6dfa81e5d66e3a556912e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
08c56dcb44c22c0940307f6c6f012bf7

SHA1
a9ef5f1eca0418456e36d94061ee277329e41dc9

SHA256
835b896b0a56d6c0c86be655e9bcab1342c0e03267a6e25b9f80e1ad099d8607

SHA512
5081cdc2bf8a308e056f5bacce7a01d6fdacb951db23b1d5c2de32550650dde26bc97310323f096007f7e9d117aa157209bbf7d4980e53834abee458f46752dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
6eb585b04d349c7410f874298728d57b

SHA1
8ff3e7654a11baa878e323e50dfc16fe6cd419ef

SHA256
be0a012d940c9dd2c8e7749df2b55bf70f37f805a93972f173c00f88b45ad17d

SHA512
6c2ea72d90ce96e4d0215bda401f32619d81de8569d4e21a33999784523dabfee0219b48cb06979d0cf64ecd6fe7430b6c637c3b69c1f5e95e3c1d9852909bd8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
d74531a2440e34e7a0137aad9e69bd45

SHA1
e4cc8e719a705ec460dba35186b1ebf776fcfd05

SHA256
67505b876fbb0f77ccff11cb81c14bbdd12b48e8da7ab243a6b39b2dc2b20306

SHA512
5a4997f9668fcfe3babd59d3943a698d2aeec7975b635b765dce610674c87bcd36feab4ebea320822995e3c7d480f3eb076470134d37831d735745a635b4a689

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
d19be71ee9307e7385bc8a15232c5c38

SHA1
4d8631c0112cfedeca36ebe03caa61886855bf1c

SHA256
7552b80ca98e2ed29773899185bc2429a8396aba0b8c18d168f3e6eeae31ae5e

SHA512
05b35b4ecbab44e03e3a4015f0606f47001539c8b0f0a6dc47dd883cde51760c4e5d95f043c4b6a8d50c649cc3ddaf02e29593f09bfe9b98b6617208fd599e4b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
ae9221f0fd53c84ddbc6438a234213ba

SHA1
400a996716169a1bf55ee6ada847c1ff8a4817db

SHA256
9576b15f5b882725c5f3c367896f561d3dfacdc5170d79ea13a879f18c3463da

SHA512
37313baa7f7ce371acc7de6634bfd7855a28053a07ca8bcdf182d2ad574aaeac66902568f3284757ab88d8fb1e61416438959cd11835d8251ff59a322717ad21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
05224e7ccc02c4ca1792ddd31612b09f

SHA1
82f427c2fa6e157b08cdabc1b3a1b2ed4e4d2aed

SHA256
9e6d8c31e199a4356852edf962ddc52e38e777602306b77d52fb60b3eb40fe13

SHA512
c5f2388282ac5f6c46260613c7e1d5820ecce9147fa4d336ed77d0dfdbbc3e2770df4d4a9d23c96990d21b8b82cb2db904a7bfafbb3bbc837b5a911172cfc35c

Download Submit