d29b5ee52df873d76fd9606f1c3458cf7977d6cbe5f462cbdf2e5d808e897abb

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
04/05/2024, 11:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

127bb880cbcecc147712c95eaf463677_JaffaCakes118.html
Size

143KB
MD5

127bb880cbcecc147712c95eaf463677
SHA1

11d738703d5cd52300ef542b69290f1479000bd4
SHA256

d29b5ee52df873d76fd9606f1c3458cf7977d6cbe5f462cbdf2e5d808e897abb
SHA512

e3a8163e23322d47107d8388d271f2670bd6627c45255f22a4d7e3d86d5c1bdfecf941599a2d96f04670935c85f3ba4aedab4fc0dfb5e0caeed489be9069fcc1
SSDEEP

3072:wZY2MYJ6rHfgaToXdYKlp+lrBmIaY7BKMtJ3:wmoaTo6llQk

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
780	msedge.exe
780	msedge.exe
4748	msedge.exe
4748	msedge.exe
1452	identity_helper.exe
1452	identity_helper.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4748 wrote to memory of 1360	4748	msedge.exe	83
PID 4748 wrote to memory of 1360	4748	msedge.exe	83
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 3184	4748	msedge.exe	84
PID 4748 wrote to memory of 780	4748	msedge.exe	85
PID 4748 wrote to memory of 780	4748	msedge.exe	85
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86
PID 4748 wrote to memory of 2664	4748	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\127bb880cbcecc147712c95eaf463677_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe3af846f8,0x7ffe3af84708,0x7ffe3af84718
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2700 /prefetch:8
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4948 /prefetch:1
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5052 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5320 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3308 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1550753299943666522,7114658542907680246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:4716

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4976

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1348

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
dbac49e66219979194c79f1cf1cb3dd1

SHA1
4ef87804a04d51ae1fac358f92382548b27f62f2

SHA256
f24ed6c5bf4b734a9af4d64e14a80a160bea569f50849f70bf7b7277c4f48562

SHA512
bb314d61f53cf7774f6dfb6b772c72f5daf386bc3d27d2bb7a14c65848ee86e6c48e9c5696693ded31846b69b9372a530175df48494e3d61a228e49d43401ad1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a9e55f5864d6e2afd2fd84e25a3bc228

SHA1
a5efcff9e3df6252c7fe8535d505235f82aab276

SHA256
0f4df3120e4620555916be8e51c29be8d600d68ae5244efad6a0268aabc8c452

SHA512
12f45fa73a6de6dfe17acc8b52b60f2d79008da130730b74cc138c1dcd73ccc99487165e3c8c90dc247359fde272f1ec6b3cf2c5fcb04e5093936144d0558b75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
74KB

MD5
1c7e1982bd31c4ac1f58bcd3bdde7267

SHA1
d672d5a215d6f3cd05138e121dc3a2aad8a584b0

SHA256
f7c3dc7f8feec3cc31ed8f65dcd3ebde31629c69e62c26ee44cb0dfc55c3de83

SHA512
33caa8d1f077129fc36e4da0f50aa8fb29b204dbc7e8439781f8e28a953da49a63a1057a83aeb1b33012aaeaf205ae62c34d1391b8885d375c486aa15ec4000e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
31KB

MD5
548260b20981c0be2d9dcf8d01c08c24

SHA1
84230120f8f1bd559eca3fb2fec6acf6cffbf4e7

SHA256
2f8a612a714e5c928525fdb193f8ec12f7965a6c0d63dd8e58ccae239358c8bb

SHA512
9308e58083e5a6989b7646de95d251c5431952dcd55e613e9c7100d817e847da0f4835bfbd0df325d9ceeb4fb9680d3e89311997b801b16bf8426893a2a34c69

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
35KB

MD5
6199d66820d319b4c775ede9fc7b6ee1

SHA1
4fee1e4da9484d70b249e1baba854ef299545d31

SHA256
e2cad833dc8c2683c919b79df8b99ef320a786bc2c99331f9f717f4b68d444ce

SHA512
2b76d355d5db8f2cad15faf40ee05276ddafbe3954a3f2c3fda0416b340920f059df3334e92f95c9e733a17cb402ea50d746bc95ccb7e39f3504b376740c927b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
20KB

MD5
9be780bc06907ecbdf0320d88e6da1d7

SHA1
5af34c97da84ba9319b4b8d6e63352eb9299bead

SHA256
bf111ba484d1fe1d7ebd0f2c1e3e61a844008abb17383c81610efa5f6ceccc3a

SHA512
ffa99bc96551ce59af822011cea136142aba10ea600760012ecc3bc5391dbdd3269e365770f4650e9de12fae39cad2a6f11d2e70a8c3c73ef17cdd93b2fb1822

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
22KB

MD5
6f52f16e0c8869759029f92150fac68f

SHA1
d7171b0111ecbc51953fb6a6a0fcb639c9aacdb2

SHA256
0ba65009d2629977348e7cc30414a518b21b8fe7f50351fcead70764219b9bb2

SHA512
ebcfdfbd773d2e7a0930684c7699f4e557995473c50ed7875cddaf1ff03fd889684400c6f17558b6f801ab5c66da0dccc312cdccb1b2fe8e8784e8c0987cfe11

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
54KB

MD5
3d43ad52a5e97214b6780973a555d0c1

SHA1
ac5dcc5dbafe9781453c87ee892c8769cff3df25

SHA256
2760b7d22f5936561faebf3afcec848f31faab71bf5c95243e36908178d33342

SHA512
e117dfd48a35fd897b052e4623449bceaef0b9d9742ebd078b36d6029743598e1a91c81c0f984f0b3e2b81ba02bd6613c78db6f477ee202374ef94bacf48b2f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1018B

MD5
1bd6c96df735d7493c42222d21e07850

SHA1
8640d0d62e71b66b8cd597d87d483343c5d45a8f

SHA256
1603899f79b65fac0857b18bee2efaeef1cae8bba7c474ac5fe10b694d695824

SHA512
af9072c7c625d914af013ec984c6de1a5dddbaa41cad48219014e737a9476dbaa2002ff9214ccbdada4ea272262168da80647c7728baa668b0f343cb4e47d635

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1018B

MD5
0e9dd0e024be14fec7d5fa587235b25c

SHA1
21211876a5f7facf12f3b53bcf1bfb2c7ce194a6

SHA256
b8e27ad49a804c51bee9c32c5d965e68ef2df371bbb719dc3f0374d427c998a2

SHA512
0e14981cbd69520baf242180ce5d21e4ca7cb85a223ab43be9bf2df160d31f0af833c4685f0a41e6715095b7443fa050226aa7a2b5bc995233128b9288d2581e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
4aa9915d270a42c532a4767c026bec4b

SHA1
ed86c7a683c3499ac4ad662c705962c5a34ebd8e

SHA256
0860a843527bb3bad0807e92890bd1277a99774dd83d3080da9e28688c25ce30

SHA512
1e87eb7c2f61bd146b8cdf7f182171803ccd9db0a52c459573f70dd9a50f92dfedd95a188123bd6bda173f7a8d5ef593e529a05843adbb526d36b642eeb0e3cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5dd3042be03e731098864367cac13268

SHA1
0072ef4cf57b9fd63dacff6eccc8d22a0aefa39a

SHA256
18f31f800e9fa8f8fdd6325f02b80e5421becfad34b04d34785c88e794731675

SHA512
5009d3d7fa9f67a6b7c13939699adb0dc030dd302f40787dd1aaba045db0a11a1042cdfd916c7d5c1606defc8c3a7889ebaf303e387f266fbcdedca94c356e9a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
71f0556ce15cf8cc617eb1db35a0c3c5

SHA1
bc9280a2ca440408145ff363683c88ffa1e6e863

SHA256
ff491081accc160e5024fb2f0767af28d92ed91d81fd4d7db0058b7cd5ad61bf

SHA512
a1cab64a47f4ad6e179d359eee09f434fad566f6d7a5660255104fe6c80ab7caf683345b9e47665f276df5b48a4b05c3695c6be7fb87ce4cdbed9c4fd04214eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
27772d89519f68179e289bd15be89091

SHA1
9d3c4f8a94e0a7a2cc9d64455fb855d10c2762f0

SHA256
bc6d62548cafd0a75516ff11721e699a4bb7ad089db18dbfac9b246968f2bd33

SHA512
2558f420986eff5ff454617691a0fea780fbee65d869f8d04c0dbefcfb3bcd82a6001d6a984d70bb7ce7197571fc59a625eabe3a889461c0f4efcced3416d138

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a36de319815f657c5b8dd57f948f0597

SHA1
792af029d69e77e52cd58bd99fd120813b8befc0

SHA256
5df303db0e61a947146147c5890f06422a0dc013c4a0c7ef2265eaf2af511cc2

SHA512
fba2d7a3a8117fc03123f04989b6409a64efbbaa84422dd4cb85ce606b427ab9da5735ecb92bfa5a4fd14642d816182e2bb288baa32621dcf5e1ba7471e78eff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
1fb5e89fee8ec5e69e8fcc3cc60829ac

SHA1
5cf1a17a7c5ae24e4d844040cf8381fb9efe5231

SHA256
c63b60ffc5dafa914095988969977b01e0aba6514a11e49f43c874e2aadf301a

SHA512
0ece63fd210d16c47a735a75539d1a7a6615a3f2b7e6e04dabacd930fa5b56081de2fd34d6d1eab27725626edc34d63ea67f750985e17ed9d027e4c6c7217d25

Download Submit