750abfd1058c5eb817e8a647878f212d4ba2e1b772a5aeed1ea3a7da09dba24b

Analysis

max time kernel
145s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
21/08/2024, 01:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b19ead3eda4a585de4893b1ab0e6002d_JaffaCakes118.html
Size

59KB
MD5

b19ead3eda4a585de4893b1ab0e6002d
SHA1

3aaa48c2ee92ad412c5f598c10019ff2411c395b
SHA256

750abfd1058c5eb817e8a647878f212d4ba2e1b772a5aeed1ea3a7da09dba24b
SHA512

6955f842d7497de19c7bf4b587ae43d388bdae332299da98efb9be90945537773758472ce1c2f876283af1fa4f187a31ad240852ab4150518fdbe6b2794b09e8
SSDEEP

1536:r6hYwf3wG3wp3wapiw7vBLvo8cl5mJGIZcyDj8eEsUluwu9:r6hYw+piw7v9A8clMJxZcyDj5Uluwu9

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4992	msedge.exe
4992	msedge.exe
3952	msedge.exe
3952	msedge.exe
3680	identity_helper.exe
3680	identity_helper.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3952 wrote to memory of 2672	3952	msedge.exe	86
PID 3952 wrote to memory of 2672	3952	msedge.exe	86
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 668	3952	msedge.exe	87
PID 3952 wrote to memory of 4992	3952	msedge.exe	88
PID 3952 wrote to memory of 4992	3952	msedge.exe	88
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89
PID 3952 wrote to memory of 844	3952	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b19ead3eda4a585de4893b1ab0e6002d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff82b2d46f8,0x7ff82b2d4708,0x7ff82b2d4718
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2812 /prefetch:8
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5824 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5104 /prefetch:1
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6484 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,9946996372689878637,8448675355317765474,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1048 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4396

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4792

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3108

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1192

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
135KB

MD5
cb98a2420cd89f7b7b25807f75543061

SHA1
b9bc2a7430debbe52bce03aa3c7916bedfd12e44

SHA256
bea369fc5bdd5b9b473441583c46b9939232bf1f98c1cedf6bc2241c4f5068d4

SHA512
49ccede4596d1e5640a9c8e8be333f9c18812d58f02b2b15adb54172df1387439e9dc5afc4ccd9d8f0f75f092318bed68d3cd577338e88ef4f9373de8a07c44e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
792B

MD5
6dfa57e0a91a625883f31a707fcb94f7

SHA1
8baa4a9ff4da9c2189bd8d76c1bebd3071d7a758

SHA256
d924b0dbbc0b665d0d39a4ce6e1fbf4d38bc73b344593633571ef5db0378c1c4

SHA512
c497e4ff1e6db15e61511df85c27a5b220eff39b69e4ddde01f477284924028764c3d1c916576050de5d8b6b381b4d4da3b3e17565c9b4a9653dd78a8894c300

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
5KB

MD5
8ecead7a298fc7df9b0c7b94da5b0427

SHA1
0843e73d108bd638cad1aa9ba03ae580c1dd2cec

SHA256
2238a432450fcaaa20ed1ff9c9cb4f0d1035dabe1cd2487c80c184e4314c1c55

SHA512
07bf7fc4f120019807f58a908f004e61e537d16d139d8206d02aae0996ed0924ff347158e1646da8c815f3bdfe58992bacc7fb899d4184f1baed23012676bdd9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
5KB

MD5
1626076c900572fdb51d610993abf22a

SHA1
98dd665195d708b9d335ca5d8801ed9878da8fda

SHA256
e7faf97bb2a0b840f80e28cf222a5141ae5a360b7a7d324935c4223917a895e3

SHA512
213b8d5c2b29843786b1bd8edf9db90bc2d4d26bfead15c01e5a2c637fe20e49e568103146ab3501e37dc2025785ae8a864abb0c95649e6b71590ae01171dbc5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
fb99f7156270b9a93f49b3bf98d9f5c0

SHA1
51165a25dfc415d6f1f84c770e860d19a62297a9

SHA256
d99cf0013406d482aa8c2e039d0fbcccc8c30496738b1fae80633174e366cb17

SHA512
08bf59a7620487bbe0303ae350920534a392eac4d724cddac7d43a991db2f36fdf5fed4fcd45343d6469ef3a10c3fe1fff12a7a12a6b69280b42eab0e6d381da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
2a830e0f9acf92795d5d2aa8fcee9b20

SHA1
0e7dccef55eb5191598f06c85119659993dca7e7

SHA256
dfd0eecb4b9aec70037314850c58c1bc401b42dfc02a3e9362d60b3ada938fc4

SHA512
40fd65bd3f06c96440b369abb18dd2062f53dfa5581105e73bc2c8e4757476072e1b7a4a82728c3754d41dbe6e5c2f2e9ccc968406ef8236f0b6e0094513acf3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
7a2971bb514f0dd5d21a8355771431dc

SHA1
7af8dc175b60ba9b61130ad7201dfa030ce5f01a

SHA256
efcd18e74129a7c666bbce7e60e82444bdd9e61f6406f2a5086b6f8b3e2b9ab8

SHA512
9dee1e3b9aa7e341c50fe7fd06287df3c6cd32693be391500f358e9669067d482284c5b39d5d1e9d0666f32d2e8782eb2ded3e5340fad11a9568ea7eaa419d42

Download Submit