fdee85b1c1098ccf17d5c44b780d07da4076d984d46468b086dc2c038b4eb78d

Analysis

max time kernel
145s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2024 07:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ead3d399b8a7086d3bcd9b7088054e06_JaffaCakes118.html
Size

61KB
MD5

ead3d399b8a7086d3bcd9b7088054e06
SHA1

a498e1c346e7d65f3191b487d0bad997768943ec
SHA256

fdee85b1c1098ccf17d5c44b780d07da4076d984d46468b086dc2c038b4eb78d
SHA512

b90b4007d19cb203ce4e27bd1ea60e365c462227c355ee01551f6e3d13d034b54de532e0207fece356e4f15968e360648aa754c078b4424022af2f1874fdad8a
SSDEEP

1536:BY8b8VkeO3hQLvvAymURyxdShKaS6cgRrBDXSE:5eO3cvvAymYyah/HDXSE

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1408	msedge.exe
1408	msedge.exe
2024	msedge.exe
2024	msedge.exe
2320	identity_helper.exe
2320	identity_helper.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2024 wrote to memory of 4920	2024	msedge.exe	82
PID 2024 wrote to memory of 4920	2024	msedge.exe	82
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 2112	2024	msedge.exe	83
PID 2024 wrote to memory of 1408	2024	msedge.exe	84
PID 2024 wrote to memory of 1408	2024	msedge.exe	84
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85
PID 2024 wrote to memory of 1692	2024	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ead3d399b8a7086d3bcd9b7088054e06_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdef0446f8,0x7ffdef044708,0x7ffdef044718
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2468 /prefetch:8
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5972 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4092 /prefetch:1
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1836 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,4696789829650799406,4574183559247607443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:1140

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4240

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4908

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecf7ca53c80b5245e35839009d12f866

SHA1
a7af77cf31d410708ebd35a232a80bddfb0615bb

SHA256
882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687

SHA512
706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dd2754d1bea40445984d65abee82b21

SHA1
4b6a5658bae9a784a370a115fbb4a12e92bd3390

SHA256
183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d

SHA512
92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
71KB

MD5
da52e38c98b0f2047abeb07609608ab5

SHA1
da1210caff36df73e49a0c271ff7d573c2d20d02

SHA256
726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

SHA512
35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
61KB

MD5
468446a7240461af44b59ebb2047c231

SHA1
47b7c525dc91bece99df0c414960b9490b986ba8

SHA256
ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

SHA512
ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
23KB

MD5
8dacefa7bb352d2b95569393f3a5eb5f

SHA1
7ef7578dc6124de19dd7de01ba7b3be794496aee

SHA256
7862aaba2bb596deb55e5d756d15f3d5594934dc43fca323d3af5a623c277463

SHA512
955f24bc7dfd5ed62bbcc6a3d6406fb2611c16b1a0ff7525a130f53b19bca1cdbc7f14b1112b5be76268ecc90ea1707c82caa6a8eddaba09fc0dfa1bee82f75d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
56KB

MD5
9aea170ad0cd436d974afc1513f3b5c4

SHA1
f8232c587e63ed752260d2941a78a269c01c16a7

SHA256
13383bde9c3cca3b1b575c4fa92917d33fb77189c311169fd370aa8349536dff

SHA512
f426814d6a8986ec512d25de2de26d0c3c77c2c2f9e4773bba8830c75764460adc8924ce4bfd882b875fe64ab97a0d1c9bcf743cc7efc77bc9c3acf0a4bbf125

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
f5b1f7332e32ec302cb80cf04013d030

SHA1
7358a37cd517552b9cd9fa80ddcce40b6641fbae

SHA256
d83661bb1dd3afe3a9f972b5294a2821e8b4a2a479e9519907896b76f8561f37

SHA512
c0c6f6548609b7c2db8eff48030c0f85bd5ae8922b5d40ad46a25ab1ceeaf69ba4d1648e2afda161dd65836fd093dca6e3a9cbea1d0826529ee28d1ed3161dc7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
00b255f57e46e58fcb3ea1c9da8975d1

SHA1
a90acdb2a37ca0f66dfff40965be2d949046a1dc

SHA256
c29db2f553f71bdef61e188ee153440e187071a94f1138e4db031e96d195ea6a

SHA512
4c28e745336ba3d68c3c16aba64638f1e209919be7e4eccae3a340f516283608d8a513b42515249f7acccf5e3d6e935016e699546cddd88db02318111d4bf3e0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1c4ce78cfb6d2676ab3f59b57965f165

SHA1
2cdcd11342a2f2d702ad0d6e92590a2f68407233

SHA256
55fcfdd18b33b76569a6911d6ac1c22a0c1730261a061d24d08f84ff0447c0f1

SHA512
288bf9c03c826b1e2b01d90760f210f9b2f37e63eb8e57722611eb8442478b8e4448448340321b90811e31f07786256e19bb641817a6a15b8161009e255b38d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1f5657dfed3d197c96934f3f4789fe31

SHA1
bf86f0643d0174d5b953e11a18d600b67102cbd4

SHA256
2b797b3bd6fe4f4e83c82ea944598742bb1cfe36eebc67457f0041fdab649f5a

SHA512
893c75bbc91cb27af4d513f52fc127e3b8a3289084cb9b617ba0ad6a3fb538107ca9abd9710d4b0a482df5ee7d4b3c88e09848da9a57c7fef32ba41909f86ded

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
9620ff964650acd5017907696d751427

SHA1
70f1f1684a767b976bfb88d422d223d3b9dcfeac

SHA256
c7ab50704f8e7cef19139f0790cc48f3741b99607f52ce224e5538c11d8bbdda

SHA512
c52e00b309414fb24e55ce45e418f09f39e0b11941a943d0d70a136f2c357c9248714a29991091c8b259af8aafd05856c9ffb6be490033f036a7bc8a192fab67

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1f28cba95fc50a6c5ab2ba30453862b2

SHA1
3612bc8c94153b19944e3f3582d7b5b7b74746fc

SHA256
0e665ef6fe27b5557de83795b6bd27be234445c3f449089c9d66ab0912c8cec2

SHA512
e39bf4f3e75f586921609f88e9aac480e4e4bfe487a28e70c7c343e8342f7a50132343660229e0ded878a7952b73578760e5e6871e1b0d3b8afa594140ca9c9c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9b3dc79893e700bad9b7291728bf0d5d

SHA1
a7dd76328a46021424a6ca8a09f10ddab08f69ff

SHA256
2a29d0db9cd52e3131b4787615472f27306d5d5c951df42a9b1bbe8579895cda

SHA512
e81199b7b0b258a139d4d0c4abc80bd0acfca190c747f3ae93d2420fb0d096c5c11cecc02f4b1267f3a9c797ce55012b8b2f309176c81668645b98d9b08c3524

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
371B

MD5
adc1480185a88ae445fe610df97b96d4

SHA1
84938e4836f6181c16f42165c50cf3b817e9f25d

SHA256
50a03d1e8e61b7fabebac25f3cc8751b22c02d03c676994e9ae97a6a054e30e5

SHA512
c2ec7002d51debe24603fbfe2d4d6b892482dbe3f9168d06209815555019c5ddc4a8ead2cc3cdbee6a06201d9ba4d481e1d9e5d6679accf205d20f75e514add3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58d7ae.TMP

Filesize
371B

MD5
41e828c4bbc142d982bc846fc9f39399

SHA1
705033bc08423d5c941fc966072f8c094207e020

SHA256
487b728939a5ce27d1e50a1a28828ad889a3cc2f51fe66949b6cf04f5a72e292

SHA512
c373aad065eb812382b77b25fe58e2866f611ed15e8ae3a7b7ed110c43e54b39d792be2a981f3ebd834c81bf7442592900fae5ac853f08776267ed1ab33da34c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
27a856fee454d2fe99c27c63addff582

SHA1
b0b87d220af98119066b40f23202d6515645c9b7

SHA256
2a6d895d14a0b0bcfb88473005a456fc643ae83a7f6b0cef35c851e414df80c0

SHA512
32d407c4c840819ccb096b0c129534a3b408cb58e7fac0d1173bb6c43caba5c927939bb92112d79ece941c4c1a0b33441a98ba433832a8bedadb432d1b8c4016

Download Submit