7146a2f5c11b56deea4e3d85f56a2f3a8b6bf16c150a22e47843e11f399b7740

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
31-05-2024 01:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

85849379f30f745be1f629d765196d0d_JaffaCakes118.html
Size

51KB
MD5

85849379f30f745be1f629d765196d0d
SHA1

8d208e743fc9619cd0b04ff7da6c2f889e2a0091
SHA256

7146a2f5c11b56deea4e3d85f56a2f3a8b6bf16c150a22e47843e11f399b7740
SHA512

89512518181d18445651c68679f9f7b58e52b103e4d05545fba1c19c8a032c186e891949168e88cdd716ceff7e1582ed4459dc33bdc7b76448294b5f3b98e81d
SSDEEP

1536:HoTupBTjE2vx5BVC37l597aXiOooPW6C2vUTMwHi+:HRpBTI2vLC37l597aX5o8W6CUUTMwHi+

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1572	msedge.exe
1572	msedge.exe
3528	msedge.exe
3528	msedge.exe
2944	identity_helper.exe
2944	identity_helper.exe
2660	msedge.exe
2660	msedge.exe
2660	msedge.exe
2660	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe
3528	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3528 wrote to memory of 4600	3528	msedge.exe	81
PID 3528 wrote to memory of 4600	3528	msedge.exe	81
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1960	3528	msedge.exe	82
PID 3528 wrote to memory of 1572	3528	msedge.exe	83
PID 3528 wrote to memory of 1572	3528	msedge.exe	83
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84
PID 3528 wrote to memory of 2992	3528	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\85849379f30f745be1f629d765196d0d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa5ce246f8,0x7ffa5ce24708,0x7ffa5ce24718
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2904 /prefetch:8
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2056 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2220 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6220 /prefetch:1
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,10753421802849967197,3609895739377544214,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5780 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2660

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1292

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2944

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

Filesize
1KB

MD5
55540a230bdab55187a841cfe1aa1545

SHA1
363e4734f757bdeb89868efe94907774a327695e

SHA256
d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

SHA512
c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

Filesize
230B

MD5
2c6879443de49199d4277e98a154a22e

SHA1
a69d936a0815b78267f59432935b9896ef6121d5

SHA256
0a8f5a596698803b38ec62f060e94772248c701095b0d04fe2ca5fd06ed0e9db

SHA512
8a7a9035b6c1b73214748467494db11a5ac860875a83e2d7dc6dc7749c0434f0be376a0c8ff29d6962afd4048ee10b795df74d76eef6769f6d3c880183cbd005

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1ac52e2503cc26baee4322f02f5b8d9c

SHA1
38e0cee911f5f2a24888a64780ffdf6fa72207c8

SHA256
f65058c6f1a745b37a64d4c97a8e8ee940210273130cec97a67f568088b5d4d4

SHA512
7670d606bc5197ecb7db3ddaecd6f74a80e6decae92b94e0e8145a7f463fa099058e89f9dfa1c45b9197c36e5e21994698186a2ec970bbdb0937fe28ca46a834

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b2a1398f937474c51a48b347387ee36a

SHA1
922a8567f09e68a04233e84e5919043034635949

SHA256
2dc0bf08246ddd5a32288c895d676017578d792349ca437b1b36e7b2f0ade6d6

SHA512
4a660c0549f7a850e07d8d36dab33121af02a7bd7e9b2f0137930b4c8cd89b6c5630e408f882684e6935dcb0d5cb5e01a854950eeda252a4881458cafcc7ef7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
23KB

MD5
e1c71f7c04be834f5587230db2ad24b3

SHA1
f3bab9cb99d9f343bf7ed3981aaa7450515d2424

SHA256
9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899

SHA512
205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
1df9a597f97148afbc7c98b801c1b236

SHA1
12a0cf1657f8f7a46f8c2b3f69798c6c3e8260fe

SHA256
e006ca1b01fa99f29f5969363db4b5c195e22a0530efca6bc006dcf7b8527c09

SHA512
7811b7ed3d5380f122219c0589767f81c722730bd00dff9b6706c509018401729f6342f3225244205857f5761bce9ad6c3763b2ab488f6b5720c5501b1288add

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
aa8d9dab97bf83f944ac1cbceaff1275

SHA1
59bf96f9840324fa907766cddc8cdb3dea612403

SHA256
bde6145f353d3c0a828cb9b01b4c8079d2d90c737e680ba83e4e9aba75324554

SHA512
cf1da55d9a771f7aa5872ead4bd8d0af221e8dca72c23a859342fa69492b9734baa70bb40c010f6e86b4d54a86c45708843d9d12e0df134645ac42ee0521c832

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
a86380012e673caa2eefb8eb6efc3679

SHA1
a736ac90a0a76d15594afa2b42f2db259af2c554

SHA256
8fb2a9f1a9e1eb6db6a6e3897231638111c8a0791d9687aa43eac2b856ae76a6

SHA512
fad0d472bae1a2b44d2e785c9df97f913419932178a1ffd98dea07db72830aa82723b5f6dfddb68605def4fe543463974df2bca3a6e315078944cd3edeec2dc4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
444fd5a2630d62984fe289ddb9acba06

SHA1
f8dde5608b9fdd7655e5464903e92b45014a3d6a

SHA256
cb75ab0abe48e315835902d2511c4f89da661f51118dd2abbd0abfa5772e216f

SHA512
093f80e1984301f271abe8e986e115c84a57370ae0510e1298991c596192a7c540d475b9a1448585a63da3a2d9646ade673f67d0232cdeb5dc280f64fc0c1628

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
359e9fa4527748c442f98e1e3f356899

SHA1
88d26c6c67cd14527f8306bcbff4ae7da9a616f7

SHA256
6ea0a72203d0af4e0aadec7c62443c216f862d5a7ea4d170bcbfeac125a2a93f

SHA512
36b89d8005134172cf2df5f3d00ab8a234c041d187592efb1dc00967e45f8c9244d6e312de618c45b7a7b95d45b7145ea9b42018c19339d9d78ab999297600df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
42d5ad7d5bac5359e9ea0c5e7e12e5db

SHA1
73b3bbd1d0de4cc8233a2f3bfb4e640f23d74c60

SHA256
16f4dbdb08bf923c38ba301765eb969f1eaa8b9d25f29adb49be15a830f0083d

SHA512
53ed9dfef68977d18dbbcbbd74ece1b9c9ae03b4639c73375947f36e69a87200ae4c5acc8b5e32b2905b9a0276d81b4e918969ac39a72ae656dd6bd524415fe1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
eca55dd8b4b838cedd12a2f5ce7207c6

SHA1
23e9bd2e9adf58e1954066fe34098a966e9ae944

SHA256
182875ab5150710de2dd6913c53279681a34721af2f30d54d89cc66924edcaab

SHA512
bdec30a6f625285a0b313bf89ebb706fc91948accb49f0ca80e74a19e5a03e0b220126bbe62fbde9c8ee01fba153879b5d664bbc21ac34dd1bee6789b855dd00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
e268e8729f1eefe043c048059501f133

SHA1
7e2b4f3696a3a1e04389dbe97f8c1ec3311b729c

SHA256
3ebd173da5d73e59142b2fbc32064c588a3b1dc8b13bd3411a2a0e8dbcb5baca

SHA512
d5f817e0efd40ad4135ea079f60b56f07c39acd156aa957fec0b43ca4bf815fd519c985487f767a06a83b0cb92cf08d57a8846f3897ff992efa73c356733becf

Download Submit