ed330ed2590d053812f8ea6a23c065b1a6f40ca412e909f5f7b28f078ec538cd

Analysis

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
15-05-2024 07:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

451a3346f00b305765c307faa0e159cb_JaffaCakes118.html
Size

54KB
MD5

451a3346f00b305765c307faa0e159cb
SHA1

a617aa4fe48c95b7a00c573f8e3f426b3a221f65
SHA256

ed330ed2590d053812f8ea6a23c065b1a6f40ca412e909f5f7b28f078ec538cd
SHA512

3d849b20b548d67c6dee713f6f0e4457c6475d1c5794785b3f700fcdf5db47f32d4a2b207b382cac952b07b1b5f4b47c1f14438c3ba2c7c1c870cb37bfe9583c
SSDEEP

1536:/wgr8VkeO3LUX2kEpiWRRSyiFzYlRfdwaS6cgRrbZpPj:feO3LUXUiLyiFsRfd55ZpPj

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1468	msedge.exe
1468	msedge.exe
4252	msedge.exe
4252	msedge.exe
4364	identity_helper.exe
4364	identity_helper.exe
2984	msedge.exe
2984	msedge.exe
2984	msedge.exe
2984	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4252 wrote to memory of 768	4252	msedge.exe	82
PID 4252 wrote to memory of 768	4252	msedge.exe	82
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 4836	4252	msedge.exe	83
PID 4252 wrote to memory of 1468	4252	msedge.exe	84
PID 4252 wrote to memory of 1468	4252	msedge.exe	84
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85
PID 4252 wrote to memory of 4496	4252	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\451a3346f00b305765c307faa0e159cb_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9053046f8,0x7ff905304708,0x7ff905304718
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2356 /prefetch:2
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2400 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2812 /prefetch:8
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5740 /prefetch:1
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5320 /prefetch:1
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3912 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2312,4342472776671387201,14281431702552152331,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4700 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2984

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4008

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1776

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
71KB

MD5
da52e38c98b0f2047abeb07609608ab5

SHA1
da1210caff36df73e49a0c271ff7d573c2d20d02

SHA256
726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

SHA512
35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
61KB

MD5
468446a7240461af44b59ebb2047c231

SHA1
47b7c525dc91bece99df0c414960b9490b986ba8

SHA256
ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

SHA512
ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
27KB

MD5
63be4e5a23510a7f2968ac14a005d61b

SHA1
6772c064430f31a233ac236bf82e0cfff30a8e26

SHA256
335f59ae46ff14ccdb69ed38803bd3b3d52e301fc2ce69b2146ca971e12b1d40

SHA512
a7ae9b077b41447a3ac2507ecfbd226741f5d81a635d2af0b6ce59722a06eef242dd17e5b6565a9fbbc923760189acaf0fc40364d58efab7af3ba58d5fba4568

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
21KB

MD5
3b772209a62b51a0b31e2523e2bb5886

SHA1
2f95e3fc2bf5d677798c956ac8d4636ef8d0a271

SHA256
f1c13e30cb37c88f9e75c23a6df4f8e814ee93367bbf5dd2f263c1ffb79d6bc0

SHA512
6bcf5c53eb58b0477a450780fbd06501122c53f7e0fad6c1f5f85911db6b0eba36158b245d862c69a656675cffcf4363e6798381a9ee2a23fdfc361b35abb5ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
28KB

MD5
423d8d6105d2f17608ae9d341b9417b5

SHA1
9db00ca9fac60266eb2d236da357c25b0211097c

SHA256
70a5bd235f7898f654cef58697d0c6edacce5beb466e7348762cd3f4c14aa209

SHA512
545b90ad3651252c111d9376b79da73df526c824d6dfb552d60124bac32dc8ea05d487ce47cf4d24c8484d4d747a9ec511d16400c1d65d0796f23df16128cdf8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
20KB

MD5
f3aff24fc4535a0135c1fe34c172e0e9

SHA1
914e91911307a11ab15f808875c7371276e3dd43

SHA256
8af5c229009e975afd48085c8c3d66e776742986071636d11fba0bd8d892f18f

SHA512
47efab3d9aee8637d3cf425a370cfc17241d1ceb77c03a018814f599f37eb26e69560d2aba4e769d06d7750570477c29be555be1716a039cd71029d28f957902

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
27KB

MD5
4ec6b63455c4613a498ec961869a63ed

SHA1
b24a0f2753f2359a2a04a2550509bbfde96a5bc2

SHA256
27256e394b0d1b7b2700538f8f63f9d679a3104fbe9b606a7b93a5911e736d32

SHA512
b2f37e1a70bceed246e25f089ee4e4fedc3ee89e880583e94010082445a4d7234dd74af36e0cc52e1f51f3b13f25c8cd9f43fe4fd67e79364e53e4662160744e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
81KB

MD5
b8046751a9259a41b49eb2c6d70d2268

SHA1
192ed8ad1b78e70bf76ba4ad816e25b58c096039

SHA256
ad65c4b3871658679d77f40937de6544512329a72d3dbaaf7068c9ab415c8581

SHA512
2ffeeb27db8f1df23ce4c8b304c35a5c702fd5270803955f2672e4be033ad8e58fb764851c3f425261645a8943cebaa2b77e212f50faa5bb690f112dc26b75cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
46KB

MD5
a601783b430a8f930e3f10d74cf5094c

SHA1
79528fe1bcb67c3c25d6d813a9ff57a4c7eb8050

SHA256
8c94a9da768e6bec7c897a8ee08c1b95191970f3f3091a891ad472d6bf5305cb

SHA512
63d97e76d40f989969d0e11c13deac217adf5c45ec3d93c80169b9292bdda5fb585aa91673ba15a06fd33a350d16d73856c0aa52ac093fc52456e303b86aa6ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
54KB

MD5
3d43ad52a5e97214b6780973a555d0c1

SHA1
ac5dcc5dbafe9781453c87ee892c8769cff3df25

SHA256
2760b7d22f5936561faebf3afcec848f31faab71bf5c95243e36908178d33342

SHA512
e117dfd48a35fd897b052e4623449bceaef0b9d9742ebd078b36d6029743598e1a91c81c0f984f0b3e2b81ba02bd6613c78db6f477ee202374ef94bacf48b2f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
133KB

MD5
4d1bd282f5a3799d4e2880cf69af9269

SHA1
2ede61be138a7beaa7d6214aa278479dce258adb

SHA256
5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

SHA512
615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
20KB

MD5
b6c8122025aff891940d1d5e1ab95fce

SHA1
a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4

SHA256
9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e

SHA512
e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
b87f2f0e235358a677b15556efb3eb6e

SHA1
4c19239268e7473a1d2da31397b067df47f1f9db

SHA256
b15b368d5a3caf7ac7ac345f63d3546b71ba344c941ec1908a8d57f29d12d23a

SHA512
84e460de11710be58adedb72aa87aefc7ee36f9b10bbe37856266556c2fa432f5f3503008f072880cfc390a8107ad2d531766d7f5b5af20164325c9a6f75d67e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
9d8067d46c6fd1b6da5a40c047d41839

SHA1
9eafc6a7ad5303cdd24c80f3f29c27be35b0337c

SHA256
e1bca519fac1a308db048727d06954024563d42de2a0eb9b7ace773d5b469cd3

SHA512
218521fb79ed8f7805cc9751316385cd5e1523be12a0e773172fa2fedf12d77a6e7525c35b0ed50f7420124911753ccf736dab39e7e919e8177bacd2294db5b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
830dff7ccd8f9cbd3c1b5dd8ffe44c20

SHA1
7e4ccb41fc2463873a0cd87ab773cfdfe46a962a

SHA256
1ff427203df325ac26604ed9506ecdc8a175f821ed352531d7d5fbd22acba425

SHA512
bb997d2a18db7070674e600cc6adb114f43ea39d67a56827c23410b25367b91f3835768596dbb3e6bf62f296090bcb347445e6c849aeb8faf817da8038bc9c9d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
74f50628cc743e18f0a2b86b5cc0050c

SHA1
df21b2bf1601b64ef5ecb1a646043f8fca51d1a8

SHA256
e4c9f7ad6faccab17455c72f8df19caeeafd51a41e395c7cb1eafed1d3bcd34e

SHA512
77658df75e4ec960c0002cafc7339fcb6a55b7316f288e8a3e9d3578656cafdc0eda45d0bd9f29aeadb49437fe80ec32f9b0752639fc5dd3fe39c1593f5864ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fec75eaeeb121d80d5233102361b66f7

SHA1
6bbbb9b0ed1cdea7cbef3a89bc25960c2dc3d01d

SHA256
e92d4c7caa2121a755bdfb704108ad2cc0638002b05236c00f5c7b0df6bbbd42

SHA512
f7eb049269438a32a3153a74b7b6a78ca3f815be036cee8976d9237fcd0ed940d13fc77c0fb420a95a32ff6c0032e1d7519eff43beeabbf2ff55bcf3099510c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3dd373b5db54a306958541882f2e6686

SHA1
9b2cc853f9bd6522d45214671495e583abf4e64b

SHA256
48fd0b89bd56a5f8670cd266691e403d2aee74096c33ea65a68a780a9ff0f9f4

SHA512
0b2d8550625fc07259706ae9676edcea43707f82c8fcf693da08ac94be9f106e0d15120301c22949e8d6fbe61a910ee433e0852ced81d508d974fa92c97ae385

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0807abf824ea9df4717e429d1c3d9c62

SHA1
5a642b7156545518dea494c348a66e0f1cdf6070

SHA256
6ba7588b5768a6bb36a2e0112c58259bc603f13a53c8f1879fbf8d899aeb4372

SHA512
338e93055880f87e4348bd7b02a0da27cdbc6777f9064ebfc7ebb28d2532314fd3f926043b47456f25535e833c61bfc884799825577eff50c11ea12a07452926

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1efeda8372ea5f4819e9e338ff6ce737

SHA1
10a3339ce3fcc2290fff53274b47df0d3451cbc4

SHA256
fd41cf128cc45ffc8115e8f9682eabb6ba8ff1da043e4500f422c944905e1ca7

SHA512
d53b43914624c57365545c217c30168d7deabb4ec91088a87e39f8b131d8133c02868eb61ea189556e3b32f0764881441354454a06abd5d0673cd7be53296384

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7cc955910ec55fd098f14f252d51ddcc

SHA1
42aea610c59d5892503cc5731736ed264bfc0a60

SHA256
01cf7438731eb26c1afb3aaa0b3491f623998538a3e55bb0fd988c555edb973f

SHA512
c80c70f15968cb30e8f456a0a588e431582ba69dc7450f9e18bf6cca203aa8c57362566c7a6ee30e8c036d25f5a03d35d024ff8343792b292caf8cc991643fad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ea9ec70a4aaa9aabc3b67dddde5ffe61

SHA1
6a835c89e9ee20938bf4acc6d0613efa5e051d88

SHA256
9453c7ea5805a2a200593c18a458a44f2c1c2f8214d3e7d8305327f24bd3199c

SHA512
5a603494f57028d44c50a8dc556b82392f6be8ef4539d0de53023afe17e9b3fc1c2f60fd549490b0ae41235e1a7ae155d8ac5eb350a0030b241754aaef242ea2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
367B

MD5
aa0e0b674b067b482a07c8169d8b5d43

SHA1
2ab1cb4367b9b37ea75a118982f6e63a67b36b6f

SHA256
219003532ba87a4b257c7f8cc7d63c7718c20ffc7c45954c26a055a68821391e

SHA512
733a9bcbbe66c3bd4f37714075554aee81694b3cfe30513eeeacd81a38dd947851fb52738fedeae3539a4345ba1bf6d892da0d2e63c897dbb8276860af454bed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
371B

MD5
e97919518070e934914641461e1bb1f5

SHA1
d5cd0890fa3b20d3f45fcfa6ca87ffaeb5d45f13

SHA256
05e4c75bb07e3d17802d96b25c3ec552aded68a85a24588e9b7ec44ec1e91f3e

SHA512
de2def4341897a012345cc271facaee5ad028e1aa3dbc07b97059d3374c25e48537bc9ddf37a0ee117d3760fa8d84ebf4865055f387cca5f86c175ef6b37a964

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58406f.TMP

Filesize
367B

MD5
d0e3d60c1868034836770e1c1cbb74da

SHA1
b41e9bf3e40ca0c1306ddaf39ddaf2b06938fbd2

SHA256
277331f7c6cfcfee5ec5fcac1994be77edd1403a70230af3a845bc6249c5973c

SHA512
e6fa8361d46fbe02d25bafced0cdcd7a7c9a97074f458c2dfa1c995eb6e3140036eee480a865aeacba5c067f96ccf6493d7bd5535058f3944a0cf36378ddc600

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
355a9e70a9145b7818ee37540a0eeb2d

SHA1
63473b403aedbaff0a35e572ab1a30f4eb1a761d

SHA256
f2836988a27bb6bf2ed6e7e16629bb702099b9b157093be91f8864f41f40ba4b

SHA512
94ca19e22866b40d2c021fba9b23a7afa6e26aa79c8208494e315870895e92b342b420d970bc2fe7f1866a23ab6148f5b09ef05dfb06d5f84cd089c87cb70010

Download Submit