6fac71f6369c938667ffd44fd3966945e217b51262773897158ff9f57cebc9a3

Analysis

max time kernel
145s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
06/07/2024, 01:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

274227fe4c451fdf0ef1fd53c8cd57b1_JaffaCakes118.html
Size

54KB
MD5

274227fe4c451fdf0ef1fd53c8cd57b1
SHA1

41585e4abe95b00d40b7f93b736f76da775e5b03
SHA256

6fac71f6369c938667ffd44fd3966945e217b51262773897158ff9f57cebc9a3
SHA512

cf9f9d774d47cc659d13752385092c65bd3e94561c9ca2ce9194aa83b707ba4f067f1fecb5922834550139b5c6924f928785e3894e41d568f92a7e8603e19929
SSDEEP

1536:mi4/80pMBJOuNGeB2lz1vFieZ5kZ50PjBMBviB:mi4/80pMBJOuNGBiGkqjBLB

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
688	msedge.exe
688	msedge.exe
1132	msedge.exe
1132	msedge.exe
3984	identity_helper.exe
3984	identity_helper.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1132 wrote to memory of 2280	1132	msedge.exe	83
PID 1132 wrote to memory of 2280	1132	msedge.exe	83
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 2568	1132	msedge.exe	86
PID 1132 wrote to memory of 688	1132	msedge.exe	87
PID 1132 wrote to memory of 688	1132	msedge.exe	87
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88
PID 1132 wrote to memory of 220	1132	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\274227fe4c451fdf0ef1fd53c8cd57b1_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb73b146f8,0x7ffb73b14708,0x7ffb73b14718
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2808 /prefetch:1
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3800 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7104 /prefetch:8
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7104 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7124 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6728 /prefetch:1
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1888 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1996 /prefetch:1
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,10145328039071231776,12818700217989626671,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2804 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2596

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4548

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3080

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e81c757cdb64c4fd5c91e6ade1a16308

SHA1
19dc7ff5e8551a2b08874131d962b697bb84ad9b

SHA256
82141d451d07bdb68991f33c59129214dd6d3d10158aeb7a1dc81efbc5fb12b3

SHA512
ba8de0b3b04fec5a96d361459dde0941b1b70f5be231fdec94806efa3ecf1e8faf8e27b1800fa606dc4a82e29d4cf5109b94109e5ad242ddf9f4671e2acbcfbd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2e57ec8bd99545e47a55d581964d0549

SHA1
bd7055ea7df7696298a94dedfc91136e3b530db8

SHA256
a50ba35608edc2f3360cc71be0d4b29bba0e3382d1f08f24df5322ce2ad2443c

SHA512
6b9b73d983c472149629c842e16e4f7c2f8a0a3bb6dd64837ef647db810ef1beb3a02b15dc1eec2c5de8aee6b3ca195c7d26c432705061c5b0ec7841a5bbf106

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
23KB

MD5
df14665f460474a948ef6f3ca958f319

SHA1
78acca6b4ca9499ba20a2341060e9e62d1365a0c

SHA256
e1351a972cfc2b3cee94b36da7a2d25d94e86166685a084a7f8fc1f3e578270e

SHA512
8a6bbf19d0a305b4617604e34491fea97b0d5d88b6bc7ed635daa1fd7c580fe5aaa799eaa298c949bf4cb69d8d415c0e823b6128476008e527c130a26cf59cc2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
13a1a343fe59be562a1f37f282406ec1

SHA1
09a0a6cf838a3f822af8fcb8d784430993dd3d59

SHA256
4136a88cf8e811011d9b07e0f9fd6862d747b7a9d5e3486ef69480d4ae2ccc18

SHA512
053ff0e8ac5db2aa02367a54074532ab623f9a117d0dbf948b2e4687988bfeee4ee3b1f4ec1a1fe47c12ddead6a1e54e8d4dac8c2f57b5adc47b8c7e0c3d263e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
a180a535ae0c14b0dec8dce32452cb5a

SHA1
0a0fba0d65268c67c2f9c5ed68ae2fb673ad4221

SHA256
76b2389e679a60e064f5cdea2a46552249938e5e96a0bba6a385dce945b2d47a

SHA512
d47b7208d9723d00056bb13fe14ed25a287b4ceb02c9d399d4d0d646926abb524c6bd4d1ba4ed5ee912010b03fd9802688090240e84d76388ba428748220e60f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
2e7d9289e17ae7ca726cad966b4b199a

SHA1
a699871d4468593cd3a7c2c6aad287f72d2deba7

SHA256
e8d46bdaf7c1c490fa1ef848c7fec3c294569bbd84cabeb4326e6fb2a8705946

SHA512
dee1074cca2ae455b7e8e7ac0d726419e461b4c8256431afb0f1096500047ac0d99ee9be7fa71a041501e5bc6aa6ad773da9cfaf76af85a10fb60cc528e91ce1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
9d9c809f6fd856defae1f889f8e57d29

SHA1
e05e2b87c83a66ec04e57f6d8b7f49ff0db275de

SHA256
afa2261497463e7bb271ca28922312e07a672f15dffc8980a093526aec757e89

SHA512
7254f1f3287128dfaa2a4da93a5f2beddb3327aec953d47402c6a70060b970e2601e40bcf3d3b369b256d273d291771fee4d8747bfc1dc9b196e5f5e8840f331

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
81218f218a7046d05cb725d9ebb95253

SHA1
94e652bda0a901f3093d5d4e680cc3472eb3d154

SHA256
ef049da4eeadae6eaa505cd811d2aaa27bf08b342110dcb20c3fd3a735ef7694

SHA512
0073c1ee09553138bdbde754f3cb12e8cb5a27d39c7039e468749e044b25fd32ce5b0673ca5a4d810cff0c67cf3af0c711729daa9b9e5ea03c6b50a97e4a4616

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f8add5e1a1d99863c6a29d15902c13a7

SHA1
0e77129bf248748ce014a3000267110c809a230b

SHA256
07f3def0fcc8a277dbbfd34218f31de0eb2e796b988206c88275694e1099bc76

SHA512
30c3c5befa2a962078b9279435578068e9aa034f2cda1268e8eb50b4a901dfa1ac8e208012f72d4446ef858bac2fdc852f6819f536292cb9f5b9140128d03ec4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f3fd42b263ec475a1b7dd0005b33f1ba

SHA1
aaebcf2085b8cfa71eb91150332090c6281b0a94

SHA256
4064310a9cf5fe6f1fdda631f03e9de2fe00511074e1915c99e6cda8cfe37d0d

SHA512
1e9c7b01d3f612b4233d1f20b51336b4d6d0d209b35b0b6216e8e6975d3c989c19d23eed5c3f81681784dff394473fad8c172c73275f18bdf1ae1594cb2436ad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
0c59c7670c06f4af599f51af6c80e824

SHA1
0069db9c9a55ec49164eceebe73cdde48402ea59

SHA256
fe3120a1d34523203d7743698268516e8d77a15f19b224f95e70174bf2e42cae

SHA512
ea1c7eea0040c43c10dff4b45580a5873da9d0ecb8ff0fdd4316bed56efc44d973bdd47b0108d9921de0ce809f21a1c3dcdd92b9c4a22f4c6bd67f421a31dc8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
293661e99903f8f73aaae0e33e8e690e

SHA1
4567c9762ac6ec11f11c2186c0b23ea433fb1ca2

SHA256
62e1d84e00f4ebc36333354f273fd0f45c61c4453f2243d1deef0dcaf42c0846

SHA512
dd92bbce0e6c8bfcbd7d27ba41f81cc6046425a17665afb883855a6a1c0f125253c81e27e039364f1644bee249992af943b3f2c4ef4200deb0ee0b566712d87e

Download Submit