07551432fb9b24b28633b2264aca8a7508b8f63bd0082b62f259fedcd6b0f027

Analysis

max time kernel
145s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 11:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

71d8c546ade50f91719a108eaf7f1e02_JaffaCakes118.html
Size

158KB
MD5

71d8c546ade50f91719a108eaf7f1e02
SHA1

5338e83df20d9159a7606a454a346ce553adbbc3
SHA256

07551432fb9b24b28633b2264aca8a7508b8f63bd0082b62f259fedcd6b0f027
SHA512

cc93a6c0a40284c500c92c3a1d50fcc16c4cef4424ae2571d5f97564c9f24665a60ae6376e40898c068361b2e9c98ca5aefa5785208ec632ab224b0b0b6cb876
SSDEEP

3072:vRzAUIvDGXk37oFk8kKlA8jXB1gZoENqz1SFzwUhX+EegtmkOowezxy4I0Hp1rAr:5AUFXk3UQIx1OwT

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
744	msedge.exe
744	msedge.exe
3744	msedge.exe
3744	msedge.exe
4552	identity_helper.exe
4552	identity_helper.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3744 wrote to memory of 1828	3744	msedge.exe	85
PID 3744 wrote to memory of 1828	3744	msedge.exe	85
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 3772	3744	msedge.exe	86
PID 3744 wrote to memory of 744	3744	msedge.exe	87
PID 3744 wrote to memory of 744	3744	msedge.exe	87
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88
PID 3744 wrote to memory of 908	3744	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\71d8c546ade50f91719a108eaf7f1e02_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffadd346f8,0x7fffadd34708,0x7fffadd34718
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2676 /prefetch:8
  2⤵
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4604 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6120 /prefetch:1
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7152 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7004 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2560 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5192 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7436 /prefetch:8
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7436 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6268 /prefetch:1
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7172 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,2298853092669554039,17313878214554366254,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5220 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:224

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3228

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4564

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5008

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
e6b8e2c178e48185024aaafb3fe4d2e8

SHA1
b6a26f251adf022d488aee7359f109af3b0b8993

SHA256
1f7e8136f33bdd2319e396317ab933654f731d2c437a8af760e47134bdbf8267

SHA512
5e6fb1ab808f41cdb5b932e99b19964505898629af77c82cddba3819696c2707662693f671d54acfeaa37ac1422636d70cab969c2491f6534055e5ed65e903ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
456B

MD5
b325afbee69b9b3700de0765bcacbbf6

SHA1
42ab906faac34ca1e437b1d33939c349b7fae071

SHA256
17213e8a5f0c113aa08c4b290d1cc8704ba232c0eea55672aab313e645b8c8fc

SHA512
1e0027af55fd9a285dde88e1910a49f116d7faee05290a55b1984f28583c2a388c9eaf9603b3d203ddaa8d4d4a9dbb978694aec600ab4bc477a93281b88d9100

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
b7c926bacee468a4c707194b3f73c34b

SHA1
6eb945ee599175bd38ef3a9791f3f8a9f107f418

SHA256
1d099c4ae3337bbfaf7bab778efca4477d577cbfdc06ad805b3d308c7ff1889f

SHA512
90720a2c490dd1e3548bddef6cf09cba6734f8abd2ef783c09e1f78e310e72e7982cc903d7778200c36b0c4fd0b8132efcda737520bc9e59860b2ba078ed9a0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
1c4d3002b3fd500744bdc5c2db0260f3

SHA1
054d218889df5ca81e5fe4ec28f014b0babe2d25

SHA256
d9fe08bac6dafb1c78fb78598711325e9f1f59d1020a303bd29fdd3005cfd5ed

SHA512
90504fffdbac895699c434a4b85c8f1f72e71cfcffbe700afdde9f418610790f7edf936f5f2f7cda253fb402ea85d82ab40fc0c09bdb697b4e24a796a3bc4ac3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
5KB

MD5
7aab6cd91482a0cb54204c546839b81b

SHA1
8c38987b7414dca97d8e2c7d03400fec07978881

SHA256
26980dc16afceb85dc7d363161bc4f950d90bb2fc79689e47d8ab0b1a123f7f0

SHA512
8c964f1b40873f52ecbfeebb665963a0094cb2eed4afe9666983e93204a1fe1ad4e238dc2a60869df762b6046a0a214adce8ff616468b11edae35a7280a04645

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
6KB

MD5
307f5c923fae99bf3bcaee6ed27e7021

SHA1
461dcec1a4a04a83c67d9e7efe4bc547b1884c8b

SHA256
a9fa456c26073daa8866df552303602e981e2e635c107542627376f35e586c94

SHA512
9a3f980056b4ea8d42c20441241cfb1d17d90ee33d1c61e91e07a0d1cbdcb649ffaaf7303acf1725e97c4284d96be5a9fc1f57dd1e3265e529bdcb5d70a7492d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
693792c1c625714b7e54cde4127349dd

SHA1
4714e6a9a5a9618e206bc68b2426da9f078fab73

SHA256
ea204e5df5defac199b7cdc83174b9c4cd02115e3ce3faa50a78a2ebd8d26bc9

SHA512
45bf65c07492e34c372344c889aa4efff2c2b0979566a5a4ccd7d8eb74d9c415a620b9d3e8bc020874b622f2f8741c89797a6e4896145a5b12164daed446e42e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
4048eac0d481c8b5c6163fab6b0ef2c7

SHA1
860ca8a91126389313417a9c75a5441dc36af4f1

SHA256
84bdf92068364ab1f3e468b9bd52725b1b4308b180368cfdd9ec25d581381e23

SHA512
8c1482447c679feb3886ccef4cdfbb7a0dcd449c2f362ffbbc09c227cfa219effda5eca367b1fdfe484191d882ffcce7755da59e38e40fe592615aaee98a6dbd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
611e231bed9b9f30732a507a678da8d5

SHA1
19fbd57dfec18b502a93a0cec842649ecfb59001

SHA256
3e7f9809d7e07935bc4e3933fc2a9be872e2cddffb5ed08dba6ea870200b0377

SHA512
ee273cc46809219dbc348e3f6de108526a2518f3c459be56fcfef463113a07ae7402b59fb67d24dfb58b9b67d741c9673b50f90d55bd9b4149587af0a61eb0cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
488f1bde7feabb86beceede9e8af2965

SHA1
15c4e7ce73b7338bc2b693b66c3881ed1b32c7d3

SHA256
1f967f18131e8f666256d20e3d3f6389b5d4fcc63f846e7a37401a40e5f320fa

SHA512
534c8a5c934dc0a9ec13dd09a858e031d8348cfdec00b252548a012e11605038f785ab0e03a3798fbe5c54f1c4864b17980546f344b7fc74389d27c40aaa160e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57c18b.TMP

Filesize
372B

MD5
d330ff75a6599511f4b69783edf6e842

SHA1
f013a0b16fbaf6f05a1535ffaa9acf721e5f26e9

SHA256
e6d1213d6425819b1c26ae7beaafef0df9852f81baf448dbfff3377cf471ae19

SHA512
6670f24f103f9d9364167372d65a6678b33813ac098ddcc0863f190f8cd285ac612c6448fe90cc11981ffad7caede2948c0c7eef77c5ff6358d31539b1103594

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
bcb406fa5f33deb0490e8cab46c5936b

SHA1
43422173e0645e4ec82a7a29f608168975fea2b3

SHA256
cd08cf822415dc8457d1530a832b5548711b4450825d2f593dedb088e7f055a2

SHA512
6c85dbee233a61d13b0aec93e715042a3b4c9d5aa96faf1012607c33e51de0a874da404fa2d3222389ae097bb3f4c84d67fb1bf1dd0a282357451972a63482e4

Download Submit