585283cf38032842a51e27246d83d81504af03b0fcc8a423df88f18ebf7840d8

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 23:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a717ea0397b5b736ea873a9b420daca7_JaffaCakes118.html
Size

171KB
MD5

a717ea0397b5b736ea873a9b420daca7
SHA1

ddbab1cdd364d067c6ae23040ee4b857a15b47b1
SHA256

585283cf38032842a51e27246d83d81504af03b0fcc8a423df88f18ebf7840d8
SHA512

8e5413c95aff60ba40f3de2eb7eef1fe31a74918861e72335b5813e4054e47dfe75c87c1c82ba7e1072535b8f6a802cbf351fdaa625111fc767bd41387c02278
SSDEEP

3072:sZAYu0hxpzt8aN38JDbeWqtywC6Fkd2tc1f3RUa+S94nAnWYY+CAMOHWN:sZAYuEt8aN382xxkcmUv

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
620	msedge.exe
620	msedge.exe
4608	msedge.exe
4608	msedge.exe
2760	msedge.exe
2760	msedge.exe
2760	msedge.exe
2760	msedge.exe
2116	identity_helper.exe
2116	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4608 wrote to memory of 3204	4608	msedge.exe	81
PID 4608 wrote to memory of 3204	4608	msedge.exe	81
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 2552	4608	msedge.exe	82
PID 4608 wrote to memory of 620	4608	msedge.exe	83
PID 4608 wrote to memory of 620	4608	msedge.exe	83
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84
PID 4608 wrote to memory of 220	4608	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a717ea0397b5b736ea873a9b420daca7_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa7e3f46f8,0x7ffa7e3f4708,0x7ffa7e3f4718
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4772 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5808 /prefetch:1
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6456 /prefetch:1
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4208 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6636 /prefetch:8
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6636 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7124 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6960 /prefetch:1
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4060 /prefetch:1
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,3174434592792016197,12305175843228625169,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6856 /prefetch:1
  2⤵
  PID:3924

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4368

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1120

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4192

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
81e892ca5c5683efdf9135fe0f2adb15

SHA1
39159b30226d98a465ece1da28dc87088b20ecad

SHA256
830f394548cff6eed3608476190a7ee7d65fe651adc638c5b27ce58639a91e17

SHA512
c943f4cfe8615ac159cfac13c10b67e6c0c9093851dd3ac6dda3b82e195d3554e3c37962010a2d0ae5074828d376402624f0dda5499c9997e962e4cfd26444c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56067634f68231081c4bd5bdbfcc202f

SHA1
5582776da6ffc75bb0973840fc3d15598bc09eb1

SHA256
8c08b0cbceb301c8f960aa674c6e7f6dbf40b4a1c2684e6fb0456ec5ff0e56b4

SHA512
c4657393e0b9ec682570d7e251644a858d33e056ccd0f3eebffd0fde25244b3a699b8d9244bcdac00d6f74b49833629b270e099c2b557f729a9066922583f784

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
19KB

MD5
9e3954e384c5af053acffd96b63a7289

SHA1
74be79c98f6daafdff906e9a2fb3f44246fb94da

SHA256
3cdc949b2b68103b862b14487c5cb36e138ef9bc7cbf23b2a90849c28cf606c5

SHA512
b16235a6be76e0281971ad173bb782b9df275839e15267ce54e45c40d30836055b2be31c7f273a91203ea4de94ade39b0f11d7e9c57bfd0d38f4054ab7f53fc0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
40KB

MD5
fdb3c20664d837757e10d098d2b67192

SHA1
4e6bbb9f8eb2bac5b50be60b62ca2934e7581de8

SHA256
8aecf39b9f8bedce00d59b82ff7997cc3713fa06428a31602f0fe81f59a4b72b

SHA512
e3acd534d3f9913d81cca66ca98768e4d2aea230ea648b47284f930262a31e970b827d5c3e9ddd909643fb861b3128ceafdd4cab1211f1b13271a23cf50135ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
776f0dec58f70afe73020004cd4ddd72

SHA1
8b1243aa16b8fd99bfa3d4b8e28c7fb7a465261e

SHA256
321ce98fafb9b29213fd73b405778342e9419a186bd738b752e435e1a81ded94

SHA512
247860b1fd9fbae61f701c7d361737d492b80c31b09f1a7c2cf72337545a0f88bd6343c71bec7e995214f0bc9ed9436226344a2c2e6b874ccf927f6e19f23596

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
2ae82ff6837c6687455c3a914c39b3e6

SHA1
a2956058a702acef3733a531f7e4aed67c4563be

SHA256
d016b9469f4ab5b861666fecf55cb7fd6e84424d344f5a650f0e80aa4e1ae521

SHA512
769e1f8b4ce596973d93cea338d01b1df84f18a61ac6dfdee0e9a9ebc070e071d771400df44f50a68963f9cf4fafb7b082143a5a523a906d8dda7ef4abce996c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
5KB

MD5
9f11461ad7482aa6bae799d157fe4f95

SHA1
9047207da7acedda3f26576176fde394865b30cb

SHA256
3628a982ad45daffa255d76c31e5b8a1cbf84d47fb19e907664940cad2063b5e

SHA512
c6d6f5d1395b95011a86a836e79579866a225f40d328feb3ca7bd01e6f831b4b09b3dcca7ca86e88057821853627d746c9c7305a9d6d8801023512c5472b3a74

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
0c389d6123c3671ef50114014a87ea98

SHA1
13c21bc89c78f93f9fa0f4e824ec82dd4434fcf7

SHA256
ebe7321f4b7312d63933b8b313344c83ae55b0a31aa6b833c543a9715ec0d8f0

SHA512
2f2a050ceb7fe64d71ba30701162ddbd6460d96f92ae7f2cd502fabcd2148b2cb8925903db7c0537edcc84a9da8a2ba751e1e526c3b47676373c6ea6f7d87e36

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9c80c94ce83d72db652c0f1e524ecd82

SHA1
534fc75e8a85db606e2828a693872ce099b97e8c

SHA256
0b817aabf7bb0c5dfbe52ce54f845b8fc43bb16193ea55778a2971ddbef93e92

SHA512
dd41f684d42dd719cbd6e4f52b38b7dad09166c5d44135e6e317703e29d638f939b37bab14abdfafe612480cd13db39178e6800745d91c2e1acd99d8a77896bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
ee28ce2fe216500f87e9d80f0a96bb66

SHA1
f9b647044edd12e42a97d82b0df08bd07be3283a

SHA256
a2a5c34f93303c64205ca64a326630762d36e8b0dc7a4d95510ab46f6dcf6b73

SHA512
72d2c35b6c173a1bc80fba57e0a4a86678db75c25d574bd83ace5c9a47d54fb2c6f89dd232f695110c0c13a748827d6ccd90def738b7d4d56328e9f0abf84584

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6f04e514824cf0bca46de66ab7a67470

SHA1
39f971c15803184a3cc4e57ceb184e9376c62338

SHA256
dc2f2305c9f6da46ab83149c6247a828b8014660e1ece8d8dcf8377c17152d50

SHA512
ff0b9f0d54efb692f93f920fc312f0ce37f6b0d20d175dc29aa4763f52fdcc53374d45e903fbe8657ea61ee846e927a8ca2258aeae39ab51499017adc14468a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57b805.TMP

Filesize
538B

MD5
99b01f48ab027c4ebf7b3ffd4cdaad67

SHA1
9f2d393739f122bf1f689c195054482c17c06df4

SHA256
5cb0a9f7430ea3f3c479af9ddcfce0fb40c71432979494fa7dc183cf8aaf65e0

SHA512
0a05b3abec89b36cbccbab28a13b914240ec9cc44e89fb42e4918ca8cc2d28805868dfe71c5559d1bb90ed952cea67449a486d1117a322e0274e929e8651a453

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
0f1362e520e7ea776fdac5aa885e3a35

SHA1
95ab4f614ae2debac573494e983b7d177736314e

SHA256
44e40554f2909b8258d1c7804fdb6b8824bce2c0d16fe562d3ac394856520bc3

SHA512
5534421fe745ea3c642ea625d9bc80c8551d697202e4651d7f56fba8de730386bcb874fd1c8ad5782ba602b2ee33d91976659b0ddbd9840fe2409b8fb376076a

Download Submit