1accce943a77d0f07d651e835747e329ccce8c44b86aa6a49161a8e0f0b95e1d

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23/05/2024, 05:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

69d5d3898d9eb67f5758d6cf741bc976_JaffaCakes118.html
Size

47KB
MD5

69d5d3898d9eb67f5758d6cf741bc976
SHA1

e05ab87f61c9a4b61da1de13d4001023d3e153cc
SHA256

1accce943a77d0f07d651e835747e329ccce8c44b86aa6a49161a8e0f0b95e1d
SHA512

a98b2a2969d42f009e6e93aba4b87e283980a4488c3f25376ebed69c681474e443feda9e3d3eba3b533ebd7e7177a9a5558415e7ff33b9e6d2915f7d563437ae
SSDEEP

768:5/pVc2YmJJ4TLo0QXWUNOizBlZrQd4W3htmR:5/pVc2YmJJ4TcakhrQdhfI

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1948	msedge.exe
1948	msedge.exe
3508	msedge.exe
3508	msedge.exe
5364	identity_helper.exe
5364	identity_helper.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3508 wrote to memory of 1220	3508	msedge.exe	82
PID 3508 wrote to memory of 1220	3508	msedge.exe	82
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1980	3508	msedge.exe	83
PID 3508 wrote to memory of 1948	3508	msedge.exe	84
PID 3508 wrote to memory of 1948	3508	msedge.exe	84
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85
PID 3508 wrote to memory of 4712	3508	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\69d5d3898d9eb67f5758d6cf741bc976_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8fd0746f8,0x7ff8fd074708,0x7ff8fd074718
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2476 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3020 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4652 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6616 /prefetch:1
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6752 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7236 /prefetch:8
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7236 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6356 /prefetch:1
  2⤵
  PID:5424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6340 /prefetch:1
  2⤵
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6908 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6844 /prefetch:1
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,8401477577225091810,3549037668920068188,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4744 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4224

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1516

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\371f2e6f-d521-4338-8e10-98719b35e1ba.tmp

Filesize
11KB

MD5
f6da09bf90ff8fc0dec28a804917607d

SHA1
1ee499e693138ad0046c2bcd1d0958bab145f86b

SHA256
8e16503c22358e318450e0366c843c6f5c323c6268561d77d5ca6c441feba85c

SHA512
b54ead725662b1550cb1f330f13a548478d60c17baf821b3dd8670366e0577d6599cd773dcc2d5c9f5d8786c80071a042d6d42480954e45fa00ea489900b8a7d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\31178566-be90-4169-b448-6b463a1955ab.tmp

Filesize
1KB

MD5
31371356688c2b5325343f608df36836

SHA1
95114ae923bc840a5c8b9ae791f9eba8555abe87

SHA256
b1dc6882a3948df182e89cb2d3bc3c846c70acf39b4bcfceee54e0dfda3aa0fa

SHA512
1641a78e5848faecc5e464c53e55486683f1f3f6a406cc91bc58114eee221104035967302d66e0b49c4c0f9b6582a63e527992be45384a834c9b69c68ab43847

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
ec1c769527c1f289ae38393b9bdd4652

SHA1
18d55ddc8929643f0f43a40de4f9ba89920e4204

SHA256
9db5dd7082b3ddb020e9e9bb109c2e01f92f00095e4194c57f20713b2d1c9657

SHA512
5ad21485a67eae5747f86ad30b67871f92d3fcdb5b3f09405f3e5249663f9dd833d8c419007b111ef743c5b97859ca62fc0356b5c3362d9e84461fa37194e9d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
29075ddbb75dd4c6d9342d91b51002ee

SHA1
5f0417f54c01beabe904387bdd695200bca4457f

SHA256
ad5dfa6778978afd62a85355e2c0f7c3ee6c312eb647c76e7874eaf2056f03d4

SHA512
2a31e6743e8dc82c328b0975274d3d1f52ea4f60b09feca43f900db291aa761b390708d9505364df61980f54dc9ac0e3e9a3c9a8d57feca2c9f5dfdf5d833de0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
484eb34039550f124811791463b09520

SHA1
efbb9795383706bd84a585120f2d473954c1f6f6

SHA256
61505a9d0f1029bcba5ad727011ff79f4b650316f3c6508284ad8b93e7dfc456

SHA512
23ea6a8b3a9a66c25163b1fe5277786241ecc472328f6ecf54bee7fadceb9963f9303e29afd913f4eb6ce7d77fce0a1fade8c792518dad49be8aff2bce71f48a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
dce90765f03505ebcdb7878bc977396a

SHA1
44201a866630d0fe8c4747047b33e3dac85e07ac

SHA256
9570a719d04d46eb4c99071189e7d00a4616f7660208891cbd387ba85930b08d

SHA512
901d386007a1cf3d4bc33625aa06d09956cef152c8d4957d0a4a68f9ac1ce4185202e019f0be5f580db6fce6dca9114c6096cf120f8da28fee1e51b69ed620e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
b38b6d9abc36558487deddeecccf9f6b

SHA1
8bad4205eb245e25d8fc11f20b6ffece53edb9ed

SHA256
6da46cdc5ae7d594150036b6439c2d66d64d318d2d94a203bc27ca5a92a2fd80

SHA512
df82da8256553808f7109b7e268807e666ebaccccdc61d78124146eb4cbe0067e55f6b3b5c2002eda0b6c0d8bba0cdd8fc051f28f52706a7840a318672714765

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
9a29ab1188c24ec6efbe5c2f07935726

SHA1
d7713f1fe394c2c4ca4409b590580f62dd9a1466

SHA256
231cb793598ca608f89243170bf65615fa559d2271c18af0811703ea3e728750

SHA512
75d42ab83fe79979566989f0e8bac3a08bd37bae7c24e7963add1fe3f84f0a41b24d5f1f46bda479ce3a3b88aaa8c5a6fd5cae94dded96f57aae0777a342d567

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
f4afa96ef8712b6db1b481357271aae5

SHA1
98686a2e3441e55a939226b01303527329fd35e3

SHA256
ee42fe4c4d13073f444a40187888b05a96b21293078a682d508d4553878416c2

SHA512
b64f02dd4b5a00da5554a806eeaf48390d231ded9f80c87eee5c3d3097ae6edbf2242ed73a03979e1df2433b6a4ea475090e8806bd49918dea16de59b597b064

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
fdcfa8d52f689e6c85fe09e0b6a7576c

SHA1
4f0d4ae9211563d5c73002711054f1adece7121a

SHA256
7e961b4fa6da2e3eee584cb68e027b7b8f81ed9d9313abbdc386117ea09c4deb

SHA512
ed65af1f66151862457ad7a7638d3a271ffbb56a3f0667691a9dbf058050edc2de345ed38cf90189a708a5c5bf0cff3b043f5f3d522e03a5d5fbb8248309e711

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57d476.TMP

Filesize
1KB

MD5
f1439bf5ef9b9f14263d02eedd7793a6

SHA1
db3db5a3d3abfa2deba5a047fddce511208eb15f

SHA256
8ae74d1508bfe43c138106415664131711f51f97827ac1c56a6e23bbb3ef1785

SHA512
749e7e1b76cbb51d93c0fdd3f8517e345b117051d03b34a62b50d8545b2b1b133f78b212719f595eac7001b9bf1169e46b18115a7423f40bd5aaaf71253034dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit