37999063bc09ba0cac8c4c9f21dc9aa59af1dc64b465dff0d3b49b100a724f05

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 07:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

71521b6b86a3ea787cd60498480864e7_JaffaCakes118.html
Size

123KB
MD5

71521b6b86a3ea787cd60498480864e7
SHA1

5fe9dbdba653dd6aacf3de5e30a1b30417e6e676
SHA256

37999063bc09ba0cac8c4c9f21dc9aa59af1dc64b465dff0d3b49b100a724f05
SHA512

0dbfde69086fa9d3bef22882f70335d03917aa4dc38b7b81821791bf76af6a83a0cab6f03f8e35d9b44a034ee364cb8626688b9191f7b8e8db74e122b0280d4f
SSDEEP

1536:XJp49RUHlgvKaXhTiR1V5pfwcPAP642YgThxXlKMt/NO1:Xz40pGw1V5pYWe6KgTh5lKMt1O1

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2596	msedge.exe
2596	msedge.exe
5036	msedge.exe
5036	msedge.exe
1624	identity_helper.exe
1624	identity_helper.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5036 wrote to memory of 4040	5036	msedge.exe	83
PID 5036 wrote to memory of 4040	5036	msedge.exe	83
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 4884	5036	msedge.exe	84
PID 5036 wrote to memory of 2596	5036	msedge.exe	85
PID 5036 wrote to memory of 2596	5036	msedge.exe	85
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86
PID 5036 wrote to memory of 2268	5036	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\71521b6b86a3ea787cd60498480864e7_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffef95246f8,0x7ffef9524708,0x7ffef9524718
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3136 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3148 /prefetch:1
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4572 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3316 /prefetch:8
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3316 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5240 /prefetch:1
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4640 /prefetch:1
  2⤵
  PID:5284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,7908398951684783521,8286080136158705080,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1896 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3196

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1340

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2284

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
44KB

MD5
88477d32f888c2b8a3f3d98deb460b3d

SHA1
1fae9ac6c1082fc0426aebe4e683eea9b4ba898c

SHA256
1b1f0b5ef5f21d5742d84f331def7116323365c3dd4aec096a55763e310879d8

SHA512
e0c0588ff27a989cac47797e5a8044983d0b3c75c44416c5f977e0e93e9d3a9321b9283ea077e6dcad0619ac960ee45fe8570f1d5cc7d5d4117fee4f2f0c96b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
27e16001d307fb41507fc08154d897ce

SHA1
1fef6d77344526d4990e7c5163d8821b1cb6e73a

SHA256
779efab7db513a9a802bce972023a4ceafb89a98cbc97517a7f5a363b1bc5378

SHA512
688f979a8f9ec35331f95c2ed6541f56b012481328305e96db039a0afd23e131b589949114f5fe612cebc2ff02d1e79eb2d06b7c5d00a5e8558a1509f2174bb7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
2c10cc7866bc09e89d7c29834494374d

SHA1
5f038f63a3ce14a9a5a675cc4cf279ead441d4fb

SHA256
b3257315856cb7366e89a8bd9f9402e9c83eeff3897b28139a99b9f7d970c4d2

SHA512
13651702ed1b8f3790816b08d305640c65a049088e7b93c51aa2d47c35e10d0c7c0ccf8d0a961c9b3238473c8b266af35802d9f0b7a8f6a7aaeb358e97260f4f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
b2d4754d40a165c3811d01a0f2441aa5

SHA1
08fd3e51b56e2f46057a9fdc66234f42fe9c6638

SHA256
bdac9348da561fea4b1134379d9836f2911fc999a141f81191d64374ac9681d3

SHA512
a6934d685a81a548055a6fcebc0c4af8327754e1905f77796cb909531a0f99745c040efd46a9051ff9678922aa569895f7cca987f49d100d1d18d93574849ac1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
bb85d2b1f9c42cf55c55908953e1d079

SHA1
5c3dfa855f6fa8a204e0a5ad72b22626e49f164d

SHA256
97c94dcaaa8134817f269c3c4be34f9c2f70d051836ccf30db20c335a0ece9fb

SHA512
fe216ee68ccf0fc031338132837d6e6a6b7cd6cdb12121dbc389a743ed9bc60c622143481fd827963651d58e99c869e3daed87f07d1c99d19b45d054c30d5569

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5f258b49df254c0c1f8a179585e6fb47

SHA1
ec29c2438803c89363714c7967e8f6c22dbd9cf6

SHA256
5cbb23dc750bd93c2306c76c3973941a6039b8e5c1042aee93b7bf7c1db3b5a4

SHA512
b641218aff15105db1fd7b8c6010c549a9901a74b273ae0ee2b28de39494671ce40d12598ecae0b045e5961bee931e0c144bee8ec4c728a24370a8435b365d6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
2360d717b8cb300da8041764551ad448

SHA1
04b800bf4425d5cde5bee144993a822a8a754664

SHA256
f22a1ea80992eff4d1c4914c3c695980ace90a2ad3f7fd2c4ff5b88a681dc8c9

SHA512
0b5e09f54ee1e666e37db2483bd4ff3eced7298976f78ef90634b7e3492ca96350566e6c7ce9e2ef137bb5bd7bfa25540a945d98a6f380504bb33b932331a833

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
7eb7e8825308be4c430f5d9d6e3980a4

SHA1
42ed2cd19e346b22f19aacc85369469f21ac0a3c

SHA256
29e153b237b8623d3399748fa6c923c68c7bd04e75e2817cc30ab849d473eb01

SHA512
4677c1083f6db0c105f769d36f07ad70228b52d73c1b0b958d41819f3fc023c7038f25c47d8a86edcae4e357990e11ce5e73ddf676fa108ece519f5694bbd6cc

Download Submit