16840d6cca6ad4984cf989903068fae96f8766204016e03c1107328a87d141d6

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2024, 01:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

37dd2301ce025934ae9d30190fbf8044_JaffaCakes118.html
Size

121KB
MD5

37dd2301ce025934ae9d30190fbf8044
SHA1

4c2d2807bd87aac186be60e805431b1b06057535
SHA256

16840d6cca6ad4984cf989903068fae96f8766204016e03c1107328a87d141d6
SHA512

3a6754773319513c263eb2fec662a2520c78f813fa695f350b15cd5ac63554a918fc6b5d19d6c65edba57398c3e3ff8dd5f6b9174d91501a3f1b9e496d675f4e
SSDEEP

1536:S/x3rTTb2bfy+y57FhqZbAOsqLXUelr1Akc6jImV7me2ruq2tmh:S/tKDy+YXqTLXUelr1Akcoae2mtmh

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3488	msedge.exe
3488	msedge.exe
4272	msedge.exe
4272	msedge.exe
2020	identity_helper.exe
2020	identity_helper.exe
3216	msedge.exe
3216	msedge.exe
3216	msedge.exe
3216	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4272 wrote to memory of 764	4272	msedge.exe	83
PID 4272 wrote to memory of 764	4272	msedge.exe	83
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 2396	4272	msedge.exe	84
PID 4272 wrote to memory of 3488	4272	msedge.exe	85
PID 4272 wrote to memory of 3488	4272	msedge.exe	85
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86
PID 4272 wrote to memory of 3508	4272	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\37dd2301ce025934ae9d30190fbf8044_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9eb5a46f8,0x7ff9eb5a4708,0x7ff9eb5a4718
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5152 /prefetch:1
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7564 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7564 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7568 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3948 /prefetch:1
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2228,9204346154613080898,14109514369779277408,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5280 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3216

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1504

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1088

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6960857d16aadfa79d36df8ebbf0e423

SHA1
e1db43bd478274366621a8c6497e270d46c6ed4f

SHA256
f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32

SHA512
6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f426165d1e5f7df1b7a3758c306cd4ae

SHA1
59ef728fbbb5c4197600f61daec48556fec651c1

SHA256
b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841

SHA512
8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

Filesize
23KB

MD5
2f24e0f5d2c2997a89fb4a8d943c141f

SHA1
99515bde1a5bf72105116ac902ccf3db1dd3df29

SHA256
60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf

SHA512
0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
2f1f7629ae796d5205703a7872f867ab

SHA1
bef6a0da9bdede77df5e61a2dd35c4b6e3126529

SHA256
18216a09d83fef31e7c25e79d645ee10515cf9c938d9c35b57f1384284b1736e

SHA512
f49da762e243b3de79e2a12f7465fe6ea2febe166b6a5badd16110c6d3c237c267322b863fd76c9e41581ff81fc34aab624c1628c2aa608cf4b07c92b72d8788

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
556af9e942ddc0f9d5f521f685eb9ff1

SHA1
039081fc948e62a1ca88017e4483eb12b0fbf280

SHA256
98394c3f4cd974ab8da64a044adb0dbb97a5362a31b0ca34652fab5de987d67e

SHA512
24656862123d922aa3878c419a74d07bf2a33d37b154eef7664440a4d7d158f82bbdb22e2ec2afedc207cf6d1687e6d3f9400ee0f9aa749a00e3b9a1dffbe93e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
8599669b82bfc28c98a29c4ffc888212

SHA1
dfa07f107e20577aae00600fc5df3fd3ae317858

SHA256
33b2e7b9281d6592edf62b4788c9f400bf96e9f7158dcf0ae096ffee4eb875a7

SHA512
91ac0e7b0b1b428f421ce83f5c9d576cabc0464f4fae8abcfd6a39cad6771abede540524ff86c23409f40e5d8d234cbcdf94541306e605ec31b2a83068ff02f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f7b27935afb0e7e027fd3a5d9116484f

SHA1
7006d70c1623e524559c2ace305035bf990616e4

SHA256
d80889676425413b1acd24cd1e4c8ce267900179d0f7b4529da248bc5c54391f

SHA512
6f7e17fc2a0ad3263fa90f1cb377626aed396fe8b08753beb8e75269f9e6230479ad8a79e4be529f6f67387b4b3a65a86ed17d7bb9cf47b5221b71ae90d7115e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
dc65b34a55d675e3e7f70c018695abc9

SHA1
59dc0ec5574ea5aa784c0dcedc0c0252f1c3254a

SHA256
98aed97a309eced00127369e851e63e49a529f410f0b7d3548f97ac38197ce52

SHA512
99c8ed93b582d0238228e50f818aec315ed0e2bb068f38e99c2502e30c7f7b23a2166a602a1fad7b72bf4a00c7813d63c1feccac2d7f8fe5e2e95fd9f4170eb8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
aa0fca016ec2daf55015f813a9a09352

SHA1
edff35bdb76a28a256063dd16c9041e046a5615a

SHA256
019ea021ee7a649180dd232665b9e6a52a2a6a9940d2634a9a48f6b72c0b24a4

SHA512
fad68d6037826028171bb0a45fe83f2b4595a39088c6715aae81806c8614b334a480ce3949b13ba66a2819c29dce6343d2abceb90c7776e95728df3d61542a1d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
5c233888d9394ec0e4ad27551493afa8

SHA1
ce850caee5a0d0108443c5b4776bc527e97dccf6

SHA256
3cebacf526eee6c7ed04ae5489b2f6b68034f2f81e7a2072a948fdec4a4f9385

SHA512
de55b7bb07a4028d9a52ad1dd23a27937167ea364e29542516848836c45d312f838445aaf69db5fe942b3e59b4a8345ee7dcc6a4af911dd511617002db750c6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581f0c.TMP

Filesize
370B

MD5
5a0223e1f3e2ec95544f37a6177daa1d

SHA1
caddb0a8d1bb7abccc484761991d0ddd7e068d37

SHA256
ce902324d3403b9d93e2f8e43fdf2850c096845eca29fbf695880f1e10658893

SHA512
d99dbe3856544d62ee9cee7ca5a5548cd2c29d5e51672dcdf7da2566d306d034c5b7048360c667153e1a17fbd16bb8d9c5d7eeff0650e9fcd1a275bcbc93604b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
a117e1adfc88ca3ef53071d312d4d717

SHA1
a17a8b98c4c59577d250c7de03261ccf9e59672f

SHA256
7e2228ac127885216f98cd693fed430228d2d54fd4439b24b953f4f05bf088ba

SHA512
481fcb5cd4654815ba3c019f84200c6b31fc0408fcbe49ed1b27b41f1548a3049aceb657ab6cf2add1798988657aceb1871f243ff49f886c9976ef166e41c7a5

Download Submit