cd4a79079c1367b6ca2d40e188b56b28a8a9fe7a490702aa6a222e7421d36fa2

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
18-12-2024 01:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f98dc10a31d49aadf099cf8981b79786_JaffaCakes118.html
Size

125KB
MD5

f98dc10a31d49aadf099cf8981b79786
SHA1

cedea6569c5de99a2a1de4bc5a8ddf0e1161cf86
SHA256

cd4a79079c1367b6ca2d40e188b56b28a8a9fe7a490702aa6a222e7421d36fa2
SHA512

215399789c949d638871bfe7724333c82397ef95b4314b4f0d7181d93b921ea687e0d4ee58af2a039ba8ebe9419b064caa2317e35d9132847cda8edc9266997c
SSDEEP

3072:Xlklc0klcmklc7uG/bI+3SkcIklcPEijZeqhjEijZeqLLxFlodzh3AZcIHteJFE:Vklc0klcmklc7uG/bI+3SkcIklcPEijl

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4756	msedge.exe
4756	msedge.exe
2172	msedge.exe
2172	msedge.exe
3484	identity_helper.exe
3484	identity_helper.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2172 wrote to memory of 4944	2172	msedge.exe	82
PID 2172 wrote to memory of 4944	2172	msedge.exe	82
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 3940	2172	msedge.exe	83
PID 2172 wrote to memory of 4756	2172	msedge.exe	84
PID 2172 wrote to memory of 4756	2172	msedge.exe	84
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85
PID 2172 wrote to memory of 1932	2172	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\f98dc10a31d49aadf099cf8981b79786_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa8b7646f8,0x7ffa8b764708,0x7ffa8b764718
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:8
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3168 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4592 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3008 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6208 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3840 /prefetch:8
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3840 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1956,15552191615665073606,4096852093859117982,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5280 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1936

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4936

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3532

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6960857d16aadfa79d36df8ebbf0e423

SHA1
e1db43bd478274366621a8c6497e270d46c6ed4f

SHA256
f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32

SHA512
6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f426165d1e5f7df1b7a3758c306cd4ae

SHA1
59ef728fbbb5c4197600f61daec48556fec651c1

SHA256
b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841

SHA512
8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
215KB

MD5
d79b35ccf8e6af6714eb612714349097

SHA1
eb3ccc9ed29830df42f3fd129951cb8b791aaf98

SHA256
c8459799169b81fdab64d028a9ebb058ea2d0ad5feb33a11f6a45a54a5ccc365

SHA512
f4be1c1e192a700139d7cff5059af81c0234ed5f032796036a1a4879b032ce4eedd16a121bbf776f17bc84a0012846f467ad48b46db4008841c25b779c7d8f5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
6c7c2a7ecf11e40a5b74333243b5ce79

SHA1
af0da7be98f6aff847644503a154745a2a286639

SHA256
b18e17298d20afc789ad26e57998b7a36fb0ff7e4661ff452800006686c2c735

SHA512
424e459b9a56b0214fa4a027c04671af32217ce3a8c59d3b73545201e89c5641d5e412c68b92e1c4198b8c224c0560aa29f8711b781d5f1acc46f3e30ccbae12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
094b9b041c170b4c428dbe38ee75741c

SHA1
89dd09618d97625b41de03d4f8eec322be9b3db7

SHA256
c5ab9654b831028b089a2722ea8c2b78943528613364f7fde303c7c24bb63d59

SHA512
2fdf478b6ebe5047a3ea4fad1d700e80ce78e6e2c41203265d31475be0e2f6ea3ddce83c7f1d3f2b0efed948235b3b7fd1512a8f7ea7a7a23eb242cfda08ee6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
e5ed5a0e25f137fb4c091a81d49c7cde

SHA1
9ed527895e7b9279ea4da1f9e231f0950a19c78b

SHA256
8541cd11d5bbab403bfdffee6a085a6bb9e3acc1759def7334ec5507ace4b545

SHA512
27c666e0e4307dc21ab9e6b3b1e1c74b4c826740a1c719387e47b85a1e3ea8d7f94b35e1f3d856e2e17ac1ca667e16a57146c05e80d30d67c96e683e2b2a90f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
41c0ee0190922969416632a2be9a8256

SHA1
b6b4b6065e879560c532d98ac00cd1a871531904

SHA256
0174a46cba6e9121b341da34a4a43e59ef6b84872581140500b214eaabd5138a

SHA512
1afda272ef32f5c4e3ee98b40cf3e00f53fb8ac628dde9b63aab390dbdc0b1dbff249c2fed56c1774ddcff06f8785ee7cfee40cd89b2dc8ced197b0c662350b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
560a7af378b4401f6fe71749bfdb96d5

SHA1
e9713ed4a6a3309f7bf347f3e9d5fdb55c6f8fc9

SHA256
707f9fe05638f56d0111cb18f1000bfcece5243b499969c31c77a5833447ca3d

SHA512
daa842b3fb07b258c884f30df0dc29fa457ecc2f01d03ffd11f97a5950f330856bc6e6bf3fac36867fbfa391c81f6593b57f293f07cba6d04cda425f92d20bf5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
371B

MD5
2f60052e7f57e07e57fd9f3d5f9f0b64

SHA1
fc5bf41283d7c1a1ebfdde97c8b0221f3721af43

SHA256
fdc623d5dbba67e10d0ab8aaa1ba3c17aff15b6f3a04be9a9a812b1a664d068c

SHA512
f9e03658872bde167a71736af46017d2124e014a8ea8f148609b8409560601699637110960bc231e9b5a1994bb01673d774c15704847720c4ed1c10258ab5b96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5800a7.TMP

Filesize
203B

MD5
d631f0d9d539e9a125398a317c341d7c

SHA1
0784571dcd097b2bcfbade8d6bba2f55202b71b5

SHA256
4d1e9f288d5c0bb7d46c2b7888b57655612b8e095a3f7ab07d5b037f9fae30ce

SHA512
1df5bed40f1fdf6b6d14944baede504b3db0a1b5297d1cb155b310b2ec3878a285583b7a129661c3481f3451e7084b95000d7571bbae8098f26fa7516d7b11c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
deba05067a6877e890ac846f422cf5ac

SHA1
8bf1aaf604ecf037bfb5d5b0868a17c85714cef3

SHA256
e46a1eb55493a433de45706afb2f679fb255550f9094499191a683d9d98a2f9e

SHA512
6d4bf82bdccea82ab2d7dd440135c8a89edb4a9475180862f86c0c1c80be4b339e50347020b34ccb4dfea548c3d63080284672886d818f07ae9e630801100d06

Download Submit