ffe7b6feff3cdc4112f1320a98ded40c0af7148bda1448b92920c2b276a86f0b

Analysis

max time kernel
142s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
13/09/2024, 14:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

de634f5aa635aa890573eee3970a5ded_JaffaCakes118.html
Size

103KB
MD5

de634f5aa635aa890573eee3970a5ded
SHA1

5c40587ad899738d4221d0b554c6dc3eba4a831a
SHA256

ffe7b6feff3cdc4112f1320a98ded40c0af7148bda1448b92920c2b276a86f0b
SHA512

35f2cc8fe7bc5d4b771e970ee622bbca15bb0a2e786045e5ba89afee21b432295a9922cb496aa7ad7d3fb59bdbd439b6a54c0c5e184916df7f1843769ecedb47
SSDEEP

3072:HjY2sYJ6rHfgaToXdYKlG+XrDm3Zh1Ft/tMI72QdnS:H4oaTo4lZ4

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
3256	msedge.exe
3256	msedge.exe
3232	identity_helper.exe
3232	identity_helper.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3256 wrote to memory of 3300	3256	msedge.exe	83
PID 3256 wrote to memory of 3300	3256	msedge.exe	83
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 2228	3256	msedge.exe	84
PID 3256 wrote to memory of 4252	3256	msedge.exe	85
PID 3256 wrote to memory of 4252	3256	msedge.exe	85
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86
PID 3256 wrote to memory of 2924	3256	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\de634f5aa635aa890573eee3970a5ded_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa08db46f8,0x7ffa08db4708,0x7ffa08db4718
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6120 /prefetch:1
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1344 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6208 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3112 /prefetch:1
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7156 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6884 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1656103635483754234,16113650103916775491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6884 /prefetch:1
  2⤵
  PID:3956

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:524

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4664

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f9664c896e19205022c094d725f820b6

SHA1
f8f1baf648df755ba64b412d512446baf88c0184

SHA256
7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e

SHA512
3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
847d47008dbea51cb1732d54861ba9c9

SHA1
f2099242027dccb88d6f05760b57f7c89d926c0d

SHA256
10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1

SHA512
bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
23KB

MD5
2f24e0f5d2c2997a89fb4a8d943c141f

SHA1
99515bde1a5bf72105116ac902ccf3db1dd3df29

SHA256
60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf

SHA512
0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
b14cc48663624950d4fb1753d6d338f5

SHA1
600fe29806337dff07bbe27791e0ff9d194a74a1

SHA256
8f39bbedbbc28dd33af19b88d06b55cd77f0fac0231a11060f99e1c4a12c2066

SHA512
7c6b651bd7a9ea656e72d706c01f23148589c2a1eab7f9cff233e00d5f171b1a8e52961dbdf4a665bc9b2bcc573290c3bc7bc949afc93ed7f92a18a1ee9e3c2d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
445448ee78f8c6ef9c669f37832bcedb

SHA1
41ed6264fada92422a81948b79b04e6284eda621

SHA256
3c6b45a2acd9cbd0a10d07ad0c8775162fb6572070e4062fa2212ef02a6cc1be

SHA512
713d9301674fec98afe27518ac13d654a72286e86331f1af9a48bc32b1d60bfbbe06a90c4a451366cc2f9122a1e746b12ca7edc64bd8ae343479d822b7401fc8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
342e0ca9516e32960b663656e23b93e9

SHA1
268fb9d7b9273db9efb6048d3c224be52c10c228

SHA256
a7f0048ceb9c6b1342ebb1025e4d80920ec9e0c8d405fb0e5053e41f31188a9f

SHA512
af69e79a76ff122f2996c3e66f83de11321d4eb9787440498ae9f6ab9cfa968aea292d7d8f2a29fb56f29c314b0ac9abb02a00f36bf16935abb485bb90d55456

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
554717cd88fd2bef528c48432d9c2df2

SHA1
1101a3094f3cd3ac35cf7f586058ea939c46b27c

SHA256
70d6a7d3081da9a9a2f666fcd6e8c5a82538ae25c01364249836a7364f7fa521

SHA512
a54d4bca06b0841ac16595d409178580c8abffc96cc420920c68e984191757ed9148e3d2d8d5d90d4343b9f84f449d564c257ca675ef97604fb3b0f41dfd2d82

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
5fce707e7dfd49de3176b400511d866a

SHA1
a0b640d5b451df62e23f86b9f24319382171cb16

SHA256
8011db96893870af32df3cca3e048ddf680b5cb10ec735da8200201690b6d3a8

SHA512
0be2206f750a8f54fb9ff0206a7a90f497892acd9994baadc90af456e9b0a80e720fc3c33894b1b474f720ba9145cb67760d976e329321023f0b009cc9931c19

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
6ec4ae5854cf6d0b87fbd6cc7327c8fe

SHA1
70a09694f4284124251b839e0f3fb34e0458bcd6

SHA256
7e86197ebccacc6edfddf6b206e5f6cb6900c887756ce0b2169b0253ae00df2e

SHA512
f9679aa10973518e9a4fa4034d189eb1f06c817e19ca873fa228bd27403d38ac5526f5e5b97817ec37b89fccb1552f53711714ecacb79161c147dceed9c73f24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
1fe196a895d50c0898e6e2d745c841f1

SHA1
8d6e41f5056d0ba672365fc94e58d4ce9a3e6ed4

SHA256
c3e7d4360ae703de349abbbf3bb84b00bdbef7a222d856d77326aebe6443bd33

SHA512
b05049574833cf2ab2e6a1ba531103b22e3ca81e9ac1499d422c5f4001b68ceb31fa11203b6a714d495594e9995b84068bdf1990c1557933694a7eab61b09938

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
803c86554f511f1b9250f89dc9c62106

SHA1
c11841fb795bd733498a7314f890eb8b40eef74b

SHA256
3ed3f73dc2d293ba2674e911f6dec994b0862f4b628c91a921efe39a1b977f76

SHA512
9ffdd4639585f6eee2f38d01d1a29a379c4428648974ed69ad3c4533901f82d182dd9fa3c4fe9abf732acdf400cccdb69f11b2a089edcf93f2461da6e38f951c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
aebde9e2ab8830f3a99ae359d66cda5b

SHA1
48ab45ae40986cdf3f55241e604c4e32fe1fa165

SHA256
ad98ee46c18099b7f0a87a9e3fa727e6e0a6cbcd0cea6c4dbe7cca70fcab6bf4

SHA512
e1bdb7511481a56836acaf9b1dd0a68a2dac77b37c14ea66ce9df2989cfb53f12816f7aa164f3f0b920522246e1306e91c681ba2a8562e406cd067da871e4939

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
044351f05cfa7c2457f38ab1435e9184

SHA1
0606a513e2af8814a47c3e6af78e075c2833856b

SHA256
26d4b34bee52a5704aea1255906c972a90ed209530ed26d178bda84c0cfc0d05

SHA512
a820988699fbb5f7e012c060f56e9e1bedddd96230642688ab5b583b65b594c8a7b1a77349307e782da2973c6bdb778c503e632a2671374e4bb8ebc37a1c27b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
9c1ae239c66ae91d9bdda86dd45fd07f

SHA1
944c9ccbe39ba537e4f0716914552d8e4263d64f

SHA256
a01c80c61e841ad958e12f72f5bac48068b8456f35abff66844497aac9b09b44

SHA512
84f2b3df7cedb23d29f418c1ee186673e35daa59f3314f17219a883237861e22d9742600348ef8e83209934757c15e4205754fe1e24a3f3fcc4928e5369d3400

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
230b13a6724c4e333e22e263b6d62bb6

SHA1
27a450d50ab9b3315ea34f4ef3fb986c591e58bd

SHA256
24eb8a199c9cca5af4d5705f16adee2bcae59d26097395cc7bd469a74a2868b1

SHA512
d0965ba5c3495ec731ce3fcee0572bb17f05560d773a6315120c1309b0ae416d32641e4481b81b29cfd2159caa25cf0af7c92beea213dd1d140fcc8bf901b25b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
23b34c1fa44542c2b634e3305e1e3522

SHA1
292f80555a1a264927caf4e3ec8e889cdc6f2a21

SHA256
603e433019d664f2e73a6d8340c1553771b6447c16ecdddba733a9908a87fd76

SHA512
41070a77dd0907f5e02163c8f5047e5b616ad5a950691da06415df5c630a75625dc900f64532211894115b75e14a44c35db010ec77468d01ab3aae949304d9e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
8f0db100a121c744a1a6f21d024bcd5a

SHA1
a07eb37fbd2ec5af30d36c7c66776d4c5bf29c84

SHA256
41ee21293fbdeb6da6e412f8f8edcc7183d1b251370f26ad1f5ede72ac221de4

SHA512
32f3027452db2550ffad936716e3ab1e2411e7a5af78e9a23e0171f0b63e2f77a2972ad4aba1dd4853aadba29d645940123ee13550fdc08206a6a0a8cd9e48dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe583fe2.TMP

Filesize
370B

MD5
de1c873f130aecc26f39c68dbc275c65

SHA1
654896e1593f3c6168e782a6718dbce16320aa16

SHA256
127576d911329af55c13b409110cba6830b48d1d62a2c3f2a9bdda72c7106be9

SHA512
bea2cba4260f188cb21279b9a6204ed295b48131f2b9866cb4cc71f90937584676a32cf469435a933760fcce577c95d30ac9f9d0063de24fffa78795e8c5b10a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
e9c5c1f6c450b94c5c3f1b4e3f12364c

SHA1
6651ad22541d5ab4c37d05e62e2911865dd9bf7a

SHA256
a2a42b10b63c65e72457c50c34a3a808b09c8f9cc8bb5586578b9f1376bf1249

SHA512
64ac09153027e8559fd6422375799ff0b33e026ff6cbc0c6a28272e9f3d2171d74448cab1f2b02bd80991c6a6b897a875a33305bb757ae1138c067a0079534b5

Download Submit