6e4e009bfff18729f325bad98edf8f371a74ffccd89f3787a40c3baae7d98eb9

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
29-10-2024 04:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7bcd5b3d743b791d182b9e223b10a6fc_JaffaCakes118.html
Size

44KB
MD5

7bcd5b3d743b791d182b9e223b10a6fc
SHA1

a40810061ebb507bce05fb995d70e1479710bb73
SHA256

6e4e009bfff18729f325bad98edf8f371a74ffccd89f3787a40c3baae7d98eb9
SHA512

647a098b91a8337ee14cf8a180f36c75cf0ef9d1f15a7820d2867526e1ebf4b1a30e60d4f7dfd29bcb29cc5f3f8b2eb80d8d4205a11fd3a36c6e23bd6adf240d
SSDEEP

768:S7R95/YYEtzqoN9I49gO/Ltkv745nf1WCjlejNBzVvI1:S0tzqoN9D9D+v7ifvJehvI1

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3896	msedge.exe
3896	msedge.exe
2908	msedge.exe
2908	msedge.exe
5336	identity_helper.exe
5336	identity_helper.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2908 wrote to memory of 3568	2908	msedge.exe	84
PID 2908 wrote to memory of 3568	2908	msedge.exe	84
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 1356	2908	msedge.exe	85
PID 2908 wrote to memory of 3896	2908	msedge.exe	86
PID 2908 wrote to memory of 3896	2908	msedge.exe	86
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87
PID 2908 wrote to memory of 372	2908	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\7bcd5b3d743b791d182b9e223b10a6fc_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8dd1246f8,0x7ff8dd124708,0x7ff8dd124718
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2932 /prefetch:8
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5516 /prefetch:1
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6792 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7600 /prefetch:8
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7600 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:5352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6848 /prefetch:1
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6756 /prefetch:1
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,8448423550612482426,8115702849180068661,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5960 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:772

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4316

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1164

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6960857d16aadfa79d36df8ebbf0e423

SHA1
e1db43bd478274366621a8c6497e270d46c6ed4f

SHA256
f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32

SHA512
6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f426165d1e5f7df1b7a3758c306cd4ae

SHA1
59ef728fbbb5c4197600f61daec48556fec651c1

SHA256
b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841

SHA512
8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\70697f79-0d21-43df-88d9-f7dbe6f04168.tmp

Filesize
7KB

MD5
2288d36c2b75cd32eec718aa343c1e9e

SHA1
361c42c12a29ad2bee9810567e3af8564b1d42f0

SHA256
07004fa76f7f52fcd64235f1463b2cafdcb512e3c85b774516d1f29d8f638f7d

SHA512
9544ad26b1bbea9882f45f07ecf36548cd0bf5af52cfad9b65a5c2c0478b4414ad797227fd82a24c582ad2634bf9ab2467b7d7bdf0c348689b5ce4bfa369700d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
20KB

MD5
05197e9427acea2ac4dc812f97a8f078

SHA1
3d2a38b79da52e57783360f195ac3e7c85edefd8

SHA256
7bdfd36b4f017340dbc84a310014381bfd3028416ff21c54f7ce0a35cfd38191

SHA512
084d4febc28358d3ba6b0bef400f637b7f350381b8b592b1e412dd860d5aaf034c03ecfa87a064cb19dd8a42faade23c260e35a8660791011b7e51b726418ead

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
6a2440f79d1d240fec25b91612f5d046

SHA1
89c51804796378e7ab3a0132d51cbfaacfe343ba

SHA256
be285334c1b375fc9841f5750fd7f89c19010984a74fe0a9e4aa4036410bc746

SHA512
dde97ea6feefbdc30e437a45410274a434cf9a657af8e89f9a63416515596c1afd494524834b8d68023576a2b454af52d1608f1a24705be45a55bd312110f02e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
6f8343fb2eee40a7cced04cbf38fd9e5

SHA1
dcac2b526f3b9c58760f96536872a752a5d3bcd6

SHA256
ae5ac6f887464d3db88b2dca560c4b2bc01e59d1dfd85b958b19b173a358890f

SHA512
965ad818b292b24b6a9eca91f222d24a61693389422016c322e1bcc5b990ab96ee890e8f596277c9aff3e595c15767c8c9d9750a7cb29d8bb0edb223b4aeaad4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
99992f273376a649ab4f2a71c799ac46

SHA1
800f5fb1e103fbed08425a5d5bdd0380eab612e6

SHA256
60d41e7a86652c995ffff84a502581d10d387b36805912b74c0ca5a5d23ff1cd

SHA512
fbecb6341d12d9d7e246a26d89520201a5ac9702adf15874ed41418a843f9b46bc88d3d573c6ea0224ea028ae916fdbe4f0f66641a32f5fec10df1114d889f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
36ef52665d5e42fee0fa158683e3f9b9

SHA1
c3daac4011c3f0d57a670c2fcb646cb2fe64ecf2

SHA256
213fe884fc4181a9e2ecb2cc0e49c9c2fe0ab918015cf40bacc2eabfa1661bfd

SHA512
59d6ad5bbf684cbc93316526b97fa90d33eb84f7cb0e987b51a87fd12255ae328db8fa7a776d5fc3dec78ced1b3c2e11f1bd071110ea53249fe738a7ed7a764f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
31829aa6d5e16d814585de9b866948cb

SHA1
be0d43a11ebcc404b5c696ad1b15685b2735c414

SHA256
872e115ca10c7721f81d804aba58e886de06cb9b580f798701bb1ccd6dab3598

SHA512
3ac844ab7308396d6f3e83485df9b996139555fbab59e8954735544037777c5792bbb46570e985449c39fe9dcdd5bf94b926d20b604586b77755a106cd23e687

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
7babcb8cbc2166527ae62b40fa48cd7e

SHA1
dd311b23eac731dc44972f5c74f324cdb0cc97c7

SHA256
729782bf392172eee0d9c7b4e283c2e1740347e7b26b11ecd4bb4f71ce87193e

SHA512
938aa585a3ef9f3dc411e151ab9cede60883287116f0c559a6a8cdd8876822996dc11b1cbf6aff6f8224b75c42b6c4b326d5694a40aaa04716eeb6c270ecac24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
fa1ce75b72d0aa549040b75330663303

SHA1
38e0ca1497953898e22734b4b4ee21d2d3dfb36f

SHA256
573cc77007da0ea0074c61bb3aa39857bae03210719034b4119cb218193ae923

SHA512
6c8ff24c3978cc2fd4c47becdf8a5c6401c4074d8ce9a9236f3ee7939011d176044404d2e78725356618840e2e71767544fd653c6ae0c7858682b36f741fce91

Download Submit