ff15ef38ed9be8752a845c3581c3eba3c443981bf9ff6bf7235628b204056f49

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
15-12-2024 19:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f57c403a3ead05ed899fe45c29b525d0_JaffaCakes118.html
Size

118KB
MD5

f57c403a3ead05ed899fe45c29b525d0
SHA1

9dbaa5a26033d4f6d0120e39b3072d2275977788
SHA256

ff15ef38ed9be8752a845c3581c3eba3c443981bf9ff6bf7235628b204056f49
SHA512

c4fcd8a682ae0a8fc41999eb02cb2875a7c8c747c5d359fd1091d7a39a2efb2b523afc3abf67eefcef4cbd274964a5d685252db61ae7b4f12b859279036245b8
SSDEEP

3072:yEa+DKnhVF5UBbNUJEkA0bDL9sucIQ2yt/qv9MChB1:yEa+DqfZDL/cIQ2yU

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2404	msedge.exe
2404	msedge.exe
4400	msedge.exe
4400	msedge.exe
1640	identity_helper.exe
1640	identity_helper.exe
3728	msedge.exe
3728	msedge.exe
3728	msedge.exe
3728	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4400 wrote to memory of 3996	4400	msedge.exe	82
PID 4400 wrote to memory of 3996	4400	msedge.exe	82
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 4920	4400	msedge.exe	83
PID 4400 wrote to memory of 2404	4400	msedge.exe	84
PID 4400 wrote to memory of 2404	4400	msedge.exe	84
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85
PID 4400 wrote to memory of 4884	4400	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\f57c403a3ead05ed899fe45c29b525d0_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffab23f46f8,0x7ffab23f4708,0x7ffab23f4718
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2872 /prefetch:8
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5052 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2700 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6240 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6512 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,6502264022311900308,6158906867593668907,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3152 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3728

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4352

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:764

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b8880802fc2bb880a7a869faa01315b0

SHA1
51d1a3fa2c272f094515675d82150bfce08ee8d3

SHA256
467b8cd4aacac66557712f9843023dcedefcc26efc746f3e44157bc8dac73812

SHA512
e1c6dba2579357ba70de58968b167d2c529534d24bff70568144270c48ac18a48ee2af2d58d78ae741e5a36958fa78a57955bd2456f1df00b781fc1002e123d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ba6ef346187b40694d493da98d5da979

SHA1
643c15bec043f8673943885199bb06cd1652ee37

SHA256
d86eec91f295dfda8ed1c5fa99de426f2fe359282c7ebf67e3a40be739475d73

SHA512
2e6cc97330be8868d4b9c53be7e12c558f6eb1ac2c4080a611ba6c43561d0c5bb4791b8a11a8c2371599f0ba73ed1d9a7a2ea6dee2ae6a080f1912e0cb1f656c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
20KB

MD5
2ebfdbd309ee762211b4a2ac39708c4d

SHA1
b002922c672dbe1dd4caa02af24d0b1e7da616af

SHA256
54ae97d445b166859fe3ba6241b97abbac0aa0d158c72352b774d60ba3e81797

SHA512
d1687b7a6da07a72963c96a1e85661046d3d3c96f88445302afa09721fbe211a5fb8881ff14b346b0ebe8a20f5ced21979e9f58e256427e57b85d565bef17720

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
a8d6f10155b2b3ebcf577ac56350a67a

SHA1
4a5a3f32e30a1539a9dc83542c4b95144f67fccb

SHA256
a16c45bf084a59b84228ceaa0932aa6a45708722ee7c3301b22b126895d89ab4

SHA512
2be6a682746cfd173bed4faa640232869cde03dfe7c22f2de17a603602114319c1f523abe4035fba432ec9737bbe9470901b64789af29d1f15535661ce151c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
1aab38946d71dbf8544f7732fdfabed6

SHA1
2edc89efd7afb9739df413743162472b90f70002

SHA256
7399f678df3f613559c8140b475992719b3b23e7b52456f1a7d0a45ad0eaa8c8

SHA512
d2717bcfe70216e83375efc1e945fd6bf8b689a13554e76ea014137a7cb5e88477c3cee0e4e3bc00439c4d2a138ae3705696d7b406d58a9e960b1d1aaab0b922

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
70c489210ede0edf638673d8680c7907

SHA1
b82956030e0ec2f48f6b4b8b730c93d2b879a82f

SHA256
0a9ad866538cc62f9586aa067eed5464cfaf1af96f2b3b9c673c778c9f3e9b7a

SHA512
bc4cb4f6d746d748799c3f8e8b0852157c82f724043ce34fbe0a45e04457c20c9134461d34fe807f0ae8531fc8185f1ef48738aa1eb0d0e0f8d8564a49016563

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
75da16bdc88ae2f9e6e5d6efd3ff83d7

SHA1
43cc6004009dcf612bebf1d87c596e89a9bcfa96

SHA256
22852dcb13a94153a13e65ec783b2d3b29466db1f663b76158734bdd5d9fad3d

SHA512
3efbc8c41be3e1ed5c27c0d62991c68c40d74957035c321ca0cc4db797f611f23ad6fc8a5b31af6586f25d585db1bba4b18094e26cfa26fdf3fc855076a122aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b92ad312e9d045040d6715819949882e

SHA1
e5902ad78ebd94f7a6e23cd8b4a46fad955a61b1

SHA256
2d8093837c993cf4b58dcfd5a5e6f82f5333c04d2e786b32c687dd520e47e090

SHA512
0367bd826f61e709b51c8bf966fb7cb7d73b3abb4ca06dd2c505734413eac3ea69d3dc5a88bdfbfe87a055471175681620521b9795d0d253088f84048c61f531

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
567c660ba629a857da0cec2fa9702042

SHA1
9c9126b9fddb251f8293cee544f5f67aea641426

SHA256
b8a99d225a1bca0394647b7bde83e6c57b336bdb001d6f65b137ddb692b090f3

SHA512
ab32ed38c80fa9dd93d7c4ca8d90156c0524d3ef3d876ef4cf8ec0420e47f6d04850b2a0415294cc90ab172758e991d599eff1e24173299311b7edfbef51ca53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
69cbebdbfeb3d4e76f10be3605510b20

SHA1
e8f88f9c8527495a7b9f052f62e9d8099466bd85

SHA256
be22de859673327bd39aa73b87d5b1a7c058849b646a9d6e8f77f6e792dc623a

SHA512
ff5789c457dc9a2e410478104bce34c37d90ab663bbc62b97d492baa831505b895c11911bdca33c8d0c0dfa299370c554c1340971aceb0f9f60c3d62fc7ab71e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
32f867c11acabd8a795b0ed4dabd5ad8

SHA1
a6e9445effaf36ca9707c23886ab527b1c4dbc94

SHA256
cbfaada949de5805350a19c39b270dedd2f84957d0aaf70e4d0b93ba8b3dd7ce

SHA512
02bc64d8f76ab66bc2a156407d203a2e422001f93ee41145bd7ba9e9392d5200071e3d066ae4b7018cf4d28fdd86e08ad0d36ad91793837d435ef3c8fb829e92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
872B

MD5
0e6aaeef95537c56d0259a12e4c195c2

SHA1
a4c1a5339123c024608665faa00d33bf2ca1b6f5

SHA256
2d0b2a366a2239e1541e847aca0005a4e6817e84604f17ffa34f249f57857ec7

SHA512
1f23c2d6dfb6a255ca803f015e7c9a4f333ce5bb2ef693c533010ef480ba8706a109b0fa03c22d5aedacfc049fb353dde6faec97a5c641f3854ca1002d14a759

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5859d3.TMP

Filesize
538B

MD5
42df0e86a02c6dfb09b4c9a9388aba8f

SHA1
4455b4a84f2f331fec27dadd57f3521e70402302

SHA256
ee212f8988dd8bf056502826b12421cd3d3788a9bc9531a68647638a5eabe907

SHA512
ded620d6153612284ffb85830307b87eafb7163be235f1d9fae15605f6a76a36963ebab2e48a9c1629c7370960869bf32ac4a1a3f7e5eeafba727cb36a9b2bcd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
18f1ccd71870055edf6ef865af399236

SHA1
816f94dcbd58a81b012a9d9143b55db2e3c705f2

SHA256
525265ad60be8fa9519a0dc66167c2231c05d82e5bf0c539b50f934074df411d

SHA512
36343651819252f32519028cf3ac858cab314b74bcdf1ddfcb5c3632966f72a718855e363714424a35d1cc9cf16c02eba06ed4c9e635e99790084aade4968665

Download Submit