99f30ee78426ff1f894fda9202f15d64120e2e0abf7dea144ed29a5393ea4b5c

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
22-10-2024 07:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6993e9a5578c14379ccf6c0a0f3f0a98_JaffaCakes118.html
Size

78KB
MD5

6993e9a5578c14379ccf6c0a0f3f0a98
SHA1

35acafe0983b6662b18eb5d586043b22ef1b5a99
SHA256

99f30ee78426ff1f894fda9202f15d64120e2e0abf7dea144ed29a5393ea4b5c
SHA512

5f5b6608b57f1164409ec18352e9a4d53627c2b71d3b51db4d092b584966e09179cd8e60f71d14231bef2e8fbd05c1229e15ef3424642d0361b9f9a7e493922b
SSDEEP

1536:q+DJXAUeAJQJ1s+iS0bXDIBAD227pTmHPjPVnWmkyU/ploUglN:nJzF+iS0bXcBu227pyHPjPVnW1yU/pls

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3768	msedge.exe
3768	msedge.exe
2424	msedge.exe
2424	msedge.exe
4788	identity_helper.exe
4788	identity_helper.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2424 wrote to memory of 2632	2424	msedge.exe	84
PID 2424 wrote to memory of 2632	2424	msedge.exe	84
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 4856	2424	msedge.exe	85
PID 2424 wrote to memory of 3768	2424	msedge.exe	86
PID 2424 wrote to memory of 3768	2424	msedge.exe	86
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87
PID 2424 wrote to memory of 2956	2424	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6993e9a5578c14379ccf6c0a0f3f0a98_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdce0346f8,0x7ffdce034708,0x7ffdce034718
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4128 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6956 /prefetch:8
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6676 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6652 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4112 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,6455667081430871793,5736147079458057081,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4900 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3884

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2280

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4264

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6960857d16aadfa79d36df8ebbf0e423

SHA1
e1db43bd478274366621a8c6497e270d46c6ed4f

SHA256
f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32

SHA512
6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f426165d1e5f7df1b7a3758c306cd4ae

SHA1
59ef728fbbb5c4197600f61daec48556fec651c1

SHA256
b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841

SHA512
8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
42KB

MD5
101f2295c59a6c129b95bb68093aed06

SHA1
12f5843daaf99bdb874dfebaf10660c54ede2120

SHA256
9b59525954d9da17ff56cac0c0cda55bb6c4df6b7550fe68565fe0d24a963ac7

SHA512
f5e54b7609a1884253f1d05d9245def95b3721e1163ddabb6d32f5b31f824a218c60533eef25a6f91d8ae6fa314128ae258fdc341cf9a4f36bf378e874b5277f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
23KB

MD5
beda68c7227c7a5a9f974b1c74d257a0

SHA1
8a03576d27c23e9612bcbb5b9e758e4535ee4c81

SHA256
e9b270df7c8655f05f8336e4897debbf71a38a69c3030f33031376b4257addb2

SHA512
4e178897f5ae13f1cbb2b374918e22b5b281a78e3362fd6125701776c8826956c06153147840b52aaf4316bc8078059f83ee4758d84cde70190bde8f1f36e619

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
552B

MD5
0eccb5cb5b4a0264d58c7128722cb4d0

SHA1
39195c8b780e7676871f4c39bca81801e88e0df4

SHA256
6aba5d4ef41ff890878e5d34f695fc12b246b09b8e8b7ed77316b490addf204e

SHA512
deace42cc04f8fbaaeae49297c3ae1ab30f605b18a156bbe8347be3265c6f8fce46446fcdc4f3ff3463cc692b5598ae227b30481e5842e02dd9e3574c532a681

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
8382e07a8099a9b6f1a9040c8f275944

SHA1
5a2eded560148d75c60707919acf279b4792f674

SHA256
71fc83017a0b852b9ef2b5fef97fee65c07caea8d6bd0a432b8fe440a8d7bfe1

SHA512
591c181301db02b5de28f9538fca1003b1a5408d2a092baa1e0c43d5044d727996f90d7a874393798df7bf9b3e45f21592bfbef8b66d9863c961e5bd457ae814

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
734ad93960538249cfc4da318ab273a0

SHA1
d4a10ff6511689003989c51125ebca494c8fda6f

SHA256
a8555f31785ba155931396a9a7ae7d6166838c0aa3f3595e8f096dbcdbf3ac2b

SHA512
6828815986cf6c301a578aa2d1b070bf3d5d1acbb7bfbe9c484d3579fdc9ec53628117b8c13c2d0afc7812ad966d4a6412d9149edabda458ef3d268090bb0095

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
f2317fd862a03d344a0197becec97059

SHA1
9914dd97ed3770d63a8ebc5fb132cc876ba271cb

SHA256
f4da33dc392607176c83a6a3768f5d622470b4e59ebc269a0667f5271895ca6b

SHA512
3daa8056272d7bbc16350991eeadec5d1ee481113a35584bf12ef5480f4a115a8f1700ddf4acc3608ad8d0c0462f52b5f89d6cf65d8c3286f60cd428d5046b68

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
7e1c71053d5f614d7f3981679382b139

SHA1
2f053064f9d3dbc4aba318ebef0e324e4bedce24

SHA256
a1f3652894a90337f36098e8526d49eefd89311b2079219b815f9210f8512075

SHA512
4b8b47b03e7dc28a8abae603f11d9b8cf65cc59a00d4b3ab3343d5b6f199e0d865222c88e9ae94ad227cdbf8cddbc12a659919b69e59d5854d61ef39c92dbbcc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
5e55502423e5080f76d63fea23003e91

SHA1
1c8a9b94533a0a263f969d0e8de5b862b70a2083

SHA256
6f9598d5a6a0516d6a69aa088eb24814abcfc26a2d885d9c8603cf005e562b9a

SHA512
72b5c30132e1ebcd77f1549e72349126c6d6149e33e5aea49867cdba677410a629f84f02b28657c8c2aff70715e8489ba54f7ad427aca4df9ade28ae4a9b857d

Download Submit