aff06da51f2e6ed4400e1e6707b8fcba30282784b5be70821935d45e66796436

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240910-en
resource tags

arch:x64arch:x86image:win10v2004-20240910-enlocale:en-usos:windows10-2004-x64system
submitted
30/09/2024, 14:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

01c62e6bf8d80b41219cfb5d654629bd_JaffaCakes118.html
Size

293KB
MD5

01c62e6bf8d80b41219cfb5d654629bd
SHA1

8764c6edc71326d929b7bb2a80352083f89f0ebf
SHA256

aff06da51f2e6ed4400e1e6707b8fcba30282784b5be70821935d45e66796436
SHA512

991f4a4c1ddcfd9265c09ad345aad75357cf826be9bba56b58f8e3afca2e9fb0d795dc8e4fab4b27a3b5464fc8df3923cf03e77ac1b226143ad114b54b382dce
SSDEEP

6144:S/XppaJqs5YT8PqnddPR0saTZe1OSLj2coNnRnvD+Gh0DMW+LQ/Qnlw9CnNpuN21:uXppaJqsIJ1OSLj2coNnRnvD+Gh0DMWw

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1864	msedge.exe
1864	msedge.exe
5080	msedge.exe
5080	msedge.exe
6020	identity_helper.exe
6020	identity_helper.exe
2504	msedge.exe
2504	msedge.exe
2504	msedge.exe
2504	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe
5080	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5080 wrote to memory of 2548	5080	msedge.exe	86
PID 5080 wrote to memory of 2548	5080	msedge.exe	86
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 4568	5080	msedge.exe	87
PID 5080 wrote to memory of 1864	5080	msedge.exe	88
PID 5080 wrote to memory of 1864	5080	msedge.exe	88
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89
PID 5080 wrote to memory of 244	5080	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\01c62e6bf8d80b41219cfb5d654629bd_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffc84f46f8,0x7fffc84f4708,0x7fffc84f4718
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2944 /prefetch:8
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6668 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7952 /prefetch:1
  2⤵
  PID:5700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7944 /prefetch:1
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7336 /prefetch:1
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,6266808982897670055,5850126767101373878,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7808 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2504

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1888

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2436

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7006aacd11b992cd29fca21e619e86ea

SHA1
f224b726a114d4c73d7379236739d5fbb8e7f7b7

SHA256
3c434b96841d5a0fa0a04a6b503c3c4d46f1c4e3a1be77853175e5680e182814

SHA512
6de169882c0e01217c4ca01f6ead8e5ebb316a77558e51cd862532dbf9147d9e267f8db667ff6e9fa33164243724f5e437cb882392382f3cae1072dadb762c1d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b80cf20d9e8cf6a579981bfaab1bdce2

SHA1
171a886be3a882bd04206295ce7f1db5b8b7035e

SHA256
10d995b136b604440ac4033b2222543975779068a321d7bddf675d0cb2a4c2b1

SHA512
0233b34866be1afd214a1c8a9dcf8328d16246b3a5ef142295333547b4cfdc787c8627439a2ca03c20cb49107f7428d39696143b71f56b7f1f05029b3a14376a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
21KB

MD5
b71613e0375f6f211f4ab00cd6f4a404

SHA1
44d5d3cdb0557bf68883b7d945ca6b846b4b880a

SHA256
8f02639c91d1a17251999479b0a614298b12dc90870206a3a23e16d643693818

SHA512
24173076e0da8c96178272916362c380aef0156105786bff767f4555c95d148143dd16b06a8379db9c28ff00696499a0cc214cc0396683795ee8633a414bb064

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
cc7ed08b2c0daf9f286443e2c701dc8a

SHA1
4e54e4dd475173bbe791ac9477b034f096478a6f

SHA256
7045d089e144101d0a7f1fae0249f5b7b8101b170998a7c73399e8c1796e1068

SHA512
82c32c07cdab6429950f2f25a4af65695e3df2ab82534c7c984c2930588146a0e480ec12bab46981a94394031816b80fca28ec7ac61561a323505e935e2b62f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
cabdc5f662fb04fccb82051bb8986525

SHA1
11b3e702c217bf5fa86c9347b3cc8b6a32840996

SHA256
e6c87d2a8c8b03315b8d5b6023af6a766d7c358a6cf40c3dcf399a89b19649ad

SHA512
a3b131bb08b5a0f75b5fa0a7847782af798dd04ad0d33a5a7ddbf22f4005e82d51568da5e81200656909e3ef4a9dabd4abf050f7c08e051cd569fc5484d5e4f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7f0875e296afc7ded30bef20330ed450

SHA1
9780b0a9a7b2854f8bf3790b5b5b7cd91d608d1c

SHA256
1adc8bcbd4f08e50c2d2183621faf8d150332905a408d01f565e713ce6c03c1b

SHA512
f538a43ecd2c2929f7cad8b48a114a701f1c658268df58df0c740621cd1a59e700f52cb01e2bd35c2dac7465b0f903f43b66bc53a1c6259077b67e52b723821b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8e9183ebe73202e66ba59fad736988a7

SHA1
f3f074a58a58f7a116416418d3f4e2c55ef6c0f9

SHA256
ac2926e291341d9efd8d0cc9e9c6d37c668cfc57533fa1b5aed080ecaf488f9c

SHA512
bded0b32ea653200bb2e4c955f5b6b389ba66b1fff029317ddfdd479762667672f017ef53ea826be564e8697b7ae6d7d30a9d39cfebaee8925e21bb9b62d8161

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8e59dbd93e82f3de888477bfe2ff3273

SHA1
b9ed2b5678dbda045ff7aa0b122d84b79bf78de1

SHA256
33af84cb4de97dc75a1d6857f7d56f52a6b858407916885b9f9bc4df32607642

SHA512
797ff51154d5cc4f8c8fb6021a54f5a9aa1b35edf0b68fc9e0ee9d07a7f974618833921e448040dcf6ab29ca7a23bff0002359e00588ecc0f6f283b7631db208

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
f5835af35d24e187a0d9f1d4b10e49b7

SHA1
6e051076f76199970a0dd586244c290d202f34b2

SHA256
cc6d75003f330b57668d1f42a02fb84d376799988723c9d0a83392ddf4355856

SHA512
fb0ce6326157c9e4d4ead706dd8296c9f9fb741ed3be8620eb10f5c9e8e1cb22ad33c0946db481cff6654a513f92d124c0ae76025563e3f57fd40191db810a1e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58c484.TMP

Filesize
704B

MD5
1a3fb01f8349e1073005b0080397466e

SHA1
67ffd5d149ed7b51a07545d4155b73f034f0ae0e

SHA256
5ecd5a7867afd653becad05fedd54db7c75e1dd24ebed1c4cd1785b1f77c6006

SHA512
0e32bc46914e91d716f0aef4d6b57a16e0ab246d04ad744435884760b535299ba6887ac01ede1af778157ab46ff112dc0d742a18511bd13051bb3bae8e291936

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
42bfcebd054e0d64e96bd11a9b5523a8

SHA1
a87cc3e66c31b86c7cdf1db5d34ced54effc76cc

SHA256
fd8a7e53f0bc4b55a01e16da4812bdccead59bf24a6850a528ec1b6e4648d51d

SHA512
c346ff7780d118efc3195bdbf4686de28bfd9abc4839222a1d542023f12250022f972720729bee3de50e5f7f909430e18894acc377707073bc4ef6847248536f

Download Submit