b77f83dd5ef7cfe17a31a3cb84e6f333dad44aaa9bf8cb2151659cadade7400f

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2024, 03:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ea78d9d47210db79cae0ab8f545aea53_JaffaCakes118.html
Size

263KB
MD5

ea78d9d47210db79cae0ab8f545aea53
SHA1

97f523871fa795d9efd9ccfa9735d43eb0bf5cdb
SHA256

b77f83dd5ef7cfe17a31a3cb84e6f333dad44aaa9bf8cb2151659cadade7400f
SHA512

4b5e3bed6d10221327aad97307ae586539f893c18f8297ca859490a410989250fb8456020238ba87f897b8e60ad0cdb43ea001556ee1043c0db4cff74132bc96
SSDEEP

3072:+ZIT3IQzy79unZ371W3FipL/LKjZ2tEkPyqEVu8TzMg5aWaZ+VAgJJ2ATZj7hSEL:WTu8TpL

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
1364	msedge.exe
1364	msedge.exe
4412	identity_helper.exe
4412	identity_helper.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1364 wrote to memory of 4524	1364	msedge.exe	84
PID 1364 wrote to memory of 4524	1364	msedge.exe	84
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 516	1364	msedge.exe	85
PID 1364 wrote to memory of 4612	1364	msedge.exe	86
PID 1364 wrote to memory of 4612	1364	msedge.exe	86
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87
PID 1364 wrote to memory of 3384	1364	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ea78d9d47210db79cae0ab8f545aea53_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffdcac46f8,0x7fffdcac4708,0x7fffdcac4718
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2792 /prefetch:8
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2156 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3940 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6948 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6948 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6808 /prefetch:1
  2⤵
  PID:364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6772 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3940 /prefetch:1
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,614011542083607440,13376910395457759017,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5256 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2324

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3352

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3532

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
eeaa8087eba2f63f31e599f6a7b46ef4

SHA1
f639519deee0766a39cfe258d2ac48e3a9d5ac03

SHA256
50fe80c9435f601c30517d10f6a8a0ca6ff8ca2add7584df377371b5a5dbe2d9

SHA512
eaabfad92c84f422267615c55a863af12823c5e791bdcb30cabe17f72025e07df7383cf6cf0f08e28aa18a31c2aac5985cf5281a403e22fbcc1fb5e61c49fc3c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b9569e123772ae290f9bac07e0d31748

SHA1
5806ed9b301d4178a959b26d7b7ccf2c0abc6741

SHA256
20ab88e23fb88186b82047cd0d6dc3cfa23422e4fd2b8f3c8437546a2a842c2b

SHA512
cfad8ce716ac815b37e8cc0e30141bfb3ca7f0d4ef101289bddcf6ed3c579bc34d369f2ec2f2dab98707843015633988eb97f1e911728031dd897750b8587795

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

Filesize
23KB

MD5
2f24e0f5d2c2997a89fb4a8d943c141f

SHA1
99515bde1a5bf72105116ac902ccf3db1dd3df29

SHA256
60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf

SHA512
0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
2859c88ebd4bcccf3aa04e2e90c23c1c

SHA1
aa77a4eda936dfad04d1d866c0d1fc0b0d3d10f2

SHA256
bd7ac7202887e6a4f3bb2ff45459bc83513025c82b464845b689a3ce825df0f4

SHA512
5c1b1a3c4a42c82d0f1edc3d5bdcf0b5f7bb4b2b825840a1489825ae235f52619bcf17117278a2e264a62b2497a98896e0fdae7bfe9c831974d55bdfd44763c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
ea0ad8802352c523af4bbe49167ca43f

SHA1
ffdbc5e04ae452a3690f9b6b1e1265600e458461

SHA256
37a682ee45ac417b9c6a2a702cd15ba2b4f6350c1319dfb5b5bc058d51bf342b

SHA512
34f73eb6b06778a55d8926886a9abbe132729033ed45313558040cf1decd1e316fd3d602c8231fc09261e9f3281f5493478988708e784aff11a65ccbb1da2867

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
09c03cdda98622d064bcfc06d9f2c977

SHA1
1fffc0b05d97d9abe29d63ae3dfb4ece93a5f648

SHA256
9147beaf94efbb1e5bb36223cca5c450502ce61e1a7ce455060dc502ee3d9849

SHA512
9a8e24389b7cb608b2633cbb771b6852df7272d2716c854dcb8a899ea2b5cfe7e5a7e02f530da07ee1d41190d7ff7717bb7f1be08f4d35d3f2c9298fac9213f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
1f1f49f2be60a13cef0edc4a0002c021

SHA1
54dee7d64d10bccecb1916a9f3f72d40c5df0810

SHA256
58ab1f13b12db2d79446f5ac87a498f9ab9bb1b6702f8fae3819e891eb27b0eb

SHA512
a438adfbd103b1e4f006236b1dd4cbde0cc149405c96aa6f98ffa4060cfa0a14a144672cf85616d70bea946938b4483a3a7c252e4d5233446b310941e2c5b0aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
e961573fca1c469b851715e26b159b30

SHA1
8dd1bfd8f5b94738ed9643cc40e16af519289f1a

SHA256
aef2e6922a5b675b8f45363d67c6b4aa1c949c28b87c5d88d1d1164073175b72

SHA512
b532e8308b18589d7df7c8d4a1f7fbc5ad61ad25d6499409f9eb5578ff1ae9dd5fdf5f6d9344dd2ee9781cfdfaaddf3eb2e0d0c02e77adee8c347249c32ad14e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f7a0304d83b05ab54b88213a9e3e46cc

SHA1
33d37e8139857b93fbd4b90421b2c8b3e22087f9

SHA256
23775cea397d5f8ccdffd5dbd52dc3737ee78de05a0524d51fb23cc536720d63

SHA512
14f4ef5f9f5461330cfb9f559fc0e5d592eecf2460335f0ad12dcdcfdcf3a1516ad2bdf64758b9a9e6d9d76e2703f0f4384aaac61f2314e4dda858a5965e8590

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
21f8dbd6ae2ce4898cdbb28134b0d021

SHA1
3be2f1f13d2153241209a858d7b5e89d3bfe66ce

SHA256
6b959f1770edd763d23a2174365e9a5f1bab8ea811d1bbdfd565407a62365352

SHA512
160b62dbf6d23706f5818198228e746685530caefe3635532dd27c24a389fdd4f9ebd9e95fa8eb4bff0a63e0cb8fce54e24fd7082b14b3b272296c781bc8c820

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
9669fc452b0a70cab03363c419aef3c0

SHA1
6f95b6677d3c8a2a6ee982bdef8c81c2f4ad36cb

SHA256
7cb5678ec971eede7db1e56ca0aa28981aebb33149947ff1d55fc36eebdfdfaa

SHA512
0b2245d2fdf66ce09d995b6488a7c5138333043e9172a52cfd40172b250bd6c5dfab7631f125a08a26f007de3fe16bad6688e9a60a54b708472a66ba655590b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
eef7df47ed0822ab899efb3a8d9b9914

SHA1
cfd26e07e47886744cd4e52f5a4932ef6daec550

SHA256
026e1a2b7060744bda8dc24bee1b177e3a52e3d390a7efd4d89a0189bf1a854b

SHA512
2cddeac12b68b09cf42702c633b5688f514a1bf99c59c6d8d9e9d557bd0c510e99500b6d4dc77f7a929d5228d0cd280d41bec70a6d7d5f9fed9b735ede7db226

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0dc697e473d4d96247f5e5fa324f145c

SHA1
e61d6b79a3ae6fa74b74b5cc30a54f383cfdc6f2

SHA256
3578851054988525a117813e60dc3631f0a60111d422b30a6df855b1b5bac023

SHA512
cea9738f9b0834d189aa5c5cf8ab95de9da223db0dd61893b6e79add22fcbd53230c2cdf74d1530df1745e8b992f8f3452a565ac6a769d9ff9098036104e6399

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
368B

MD5
c3b7836f7031b706762aea456b5a7766

SHA1
7a66d998419bc77bf9afc4cf7f8cb89422a339f8

SHA256
fb8ee0e476ee5422b9fa8d8475de96102af3a422b4445ebc47a4cb15f7830728

SHA512
6e795618d6a94d543cafa1f789f922cab9aedf9fc5c9db5e3818876145adbe4cedd7199fe552e701dc5c4aa2485b73170a22f6f2019321f51002c8d4b4c48d5e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe59139e.TMP

Filesize
203B

MD5
85fc73bbc0e09d6bdf948672cf481c9f

SHA1
6d27c9485af7aef4c8659d2d74f843acde13e0e5

SHA256
df214904578359ee89e386c7a43d8669d4939b53f4f223681935e07a3df9a0e1

SHA512
a571eecaafabd115b6113c836db0d7688d2e8fee886d5572b303f64ec72e83c40a2a75f9a880ff2c57323a5887c894404e483a5723d567f59ce7d7eff9a57e22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
bcd93f5b09bf78c9c7701877393a701e

SHA1
3e0439d6bf766b302447ae669366649e4dc5ca49

SHA256
34acad7a6a6f0c862ab45fde390b1ff8fc17560f49c0d317c2305114d32eeccf

SHA512
7107ef967a751894c255f819936554a3a8cf8ed2325833ebdb47178b15dc238b25000a84ec389eb2153cf70dc6904efd980950205ece722b341ebcde54141482

Download Submit