57cfeb85466b388941e672cfa7b947057b3f8538e6b74a2babdc365ff9fd8434

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19-12-2024 10:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ff824cd60a47eabd93f244552ddbccd9_JaffaCakes118.html
Size

42KB
MD5

ff824cd60a47eabd93f244552ddbccd9
SHA1

996c967a084167d3eec13f73bb5c6ab95c570898
SHA256

57cfeb85466b388941e672cfa7b947057b3f8538e6b74a2babdc365ff9fd8434
SHA512

133c9f8877fab16cfb7fda7f894d4322279ec274b9d2cd8fc17d1935f8542e11da1bded9d431a685e7abcad076bc71ac8f2c25ff0251c93f7392771052001f43
SSDEEP

768:EEWwgvQO8s4/KJ8HO34V1RnYQ8oTdwaS6cgRrCdp32Sq1iZ9:E5wgr8VSeO34V1RnYloTdwaS6cgRrCdN

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2676	msedge.exe
2676	msedge.exe
4812	msedge.exe
4812	msedge.exe
4712	identity_helper.exe
4712	identity_helper.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4812 wrote to memory of 4440	4812	msedge.exe	84
PID 4812 wrote to memory of 4440	4812	msedge.exe	84
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2392	4812	msedge.exe	85
PID 4812 wrote to memory of 2676	4812	msedge.exe	86
PID 4812 wrote to memory of 2676	4812	msedge.exe	86
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87
PID 4812 wrote to memory of 864	4812	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\ff824cd60a47eabd93f244552ddbccd9_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffefb2f46f8,0x7ffefb2f4708,0x7ffefb2f4718
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:8
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4912 /prefetch:1
  2⤵
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4128 /prefetch:1
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4952 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2640 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5328 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1836 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,16234509584057325137,17536650954283676452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2304 /prefetch:1
  2⤵
  PID:4092

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4056

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2728

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0a9dc42e4013fc47438e96d24beb8eff

SHA1
806ab26d7eae031a58484188a7eb1adab06457fc

SHA256
58d66151799526b3fa372552cd99b385415d9e9a119302b99aadc34dd51dd151

SHA512
868d6b421ae2501a519595d0c34ddef25b2a98b082c5203da8349035f1f6764ddf183197f1054e7e86a752c71eccbc0649e515b63c55bc18cf5f0592397e258f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
61cef8e38cd95bf003f5fdd1dc37dae1

SHA1
11f2f79ecb349344c143eea9a0fed41891a3467f

SHA256
ae671613623b4477fbd5daf1fd2d148ae2a09ddcc3804b2b6d4ffcb60b317e3e

SHA512
6fb9b333fe0e8fde19fdd0bd01a1990a4e60a87c0a02bc8297da1206e42f8690d06b030308e58c862e9e77714a585eed7cc1627590d99a10aeb77fc0dd3d864d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
71KB

MD5
da52e38c98b0f2047abeb07609608ab5

SHA1
da1210caff36df73e49a0c271ff7d573c2d20d02

SHA256
726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

SHA512
35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
61KB

MD5
468446a7240461af44b59ebb2047c231

SHA1
47b7c525dc91bece99df0c414960b9490b986ba8

SHA256
ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

SHA512
ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
23KB

MD5
7e98564be3c2fbfe5d55ebceef08fb8b

SHA1
4b35415b61c5ed813f615475df2d513f5dc73d5f

SHA256
b9a21d15fe5b99b73ccfd9f8df4213debb40456341e1e71d0848b3602cad2ad8

SHA512
4878d6d53441aab8c306b67a0e4051fe9fa0aa5377d6ff806c6e86fffb042c41a82efd7135754d9af1d6fc571fd23e3da37e680eb4bf983ce08de72421b0259e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
52KB

MD5
f9ad6fffe23fad04422671cf2fa4a661

SHA1
b8366163961f1689411636988a73dbc16d13ff3c

SHA256
f0ca592df98944df58f4c281890809d30fd2117e471b8021ff138314efef5dab

SHA512
e9d95f4f0eeed04413a1d798161d1c20d876f5ea4440c13e9fa356a562e931f98d84b3f6a907d6541cf6bbbd7e84f0e106b48fe2f5fcce77d66f70e114834aa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
23KB

MD5
facee74c789253ce2d2a63c6d49aeb94

SHA1
79b895ffb82ba8363f8a67f8380cd6f32a5fb907

SHA256
804c9c6d6384db9e246de900d22b3f4d79a7265bf42ba72513d3a060302b3f10

SHA512
4a1078ed20af2a83f3a3f1893f4f1e6c5f94f8608ad85c50ae232aff6b8eb931167c082ce80dc51da4f116e4cff970571b2d51234f9777ead0d5b9a5de4fa8d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
76KB

MD5
8c52c62990fcacc5ae14ce801f14b76b

SHA1
0c4a3024bfc109c053a81d86fa89190b95a93e7f

SHA256
d96e0f8cba7ee8c4adccdbcf41dd35cb432b92b8ab3114e0fedc536fc0e29253

SHA512
926e48be75db4865753393446aa66f26e811e382e333cc58790a9826c3d03304a909b389d04c3c8096b6c66dab6ff79fa44985523b5a5f87b6835ce55df3bde9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
116KB

MD5
94cdf8cba7775c0c59a260d1b459bfd3

SHA1
fb64e3aea950329d20a74db63f2faabf60be30f6

SHA256
ce6ada9cab22039edd8dcc93c2d470e7ca0bef9f95ad7397d26b9c20b9279382

SHA512
526867996655355da84afc0068c71a900d1c099ae8da1e96450c7a80847d849b078d9c9cc9371de5ac3b88d5459a5b672666bf9da69c1c4d507ac980de366bcb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
127KB

MD5
dc8d5f8dc9569824b30082599f5ad24c

SHA1
4bbfe1f52cbd55548c49383ca22fba856ab09dbc

SHA256
99a00ffd1c25e6b6c3e529a1892faeaca8b7cee0648ae452750ec4451f3043cb

SHA512
6bf5449ae63d6a4cfc76adaa556d216e71e9078ca564edc846137801710d5fdab6cfa3bfe53077f6d40e0f52c86ef841e21ef5b956e46c51b87a1fea90058261

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
a437d65143fda742d7b41a6969caa258

SHA1
b17e984d61ded1c5539faaf6c82bfe786f111ed8

SHA256
2af4dc1832c871addcdc6eba8bb37934f7da8fb2fb65f426f0fe6e555f93d38c

SHA512
f5ff6f4d6198405875c67fdf0931db899501ce04d1b41f0245909f970cd64d55cc377cade66a3775b201c823d2edf7a6b9f0754b3ced9332d32b5c75267e478d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
ad9c8d01fb9ea1f53792cd624cd5ab36

SHA1
c585b0235f5fd3bc254a08514c3ad8f88739d903

SHA256
021c21746e0a56d9281d3e5b03475af485d059f49046bd5de248f30faa05591f

SHA512
141f54e9ff28cd54fbeb722ea49f87021df6692e6a6cb690f2d07e3355c8521351ca6909ec362e34c6064b295bd1f9d371f9633519a16156181ea2d8a916a729

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
a0fd07657ae0789fb381d52a1d2d00af

SHA1
cb6e7135e33afc8774be7512afa1dbe8bf2ab2b3

SHA256
38a03230aabf51caa4ab2c29e06f24a27665dcae2a4bde64875f2e223baef846

SHA512
c8397fbc1011fe36f4e938358cdde86d889f33b8342fef746db027212ddb848e07145236e56f5214aa6d1d7e58de092739c0276279b96eb0c20c2e5048a6561f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1012B

MD5
b739a1202c5759e36f0190408134b7cf

SHA1
c9f48332743b83633c4f0a2fdb9eabe9c37002f1

SHA256
cf9a29fdb2860d496ebaf2bd88d696689c407c4bfa00777b68505708a0557848

SHA512
79bf053b1b2a85f328d816c775a8b41c6acf6282108e49b45acdc20e0235a8c60c374bed210e5ecefaa95883d338ddcb0183f6e8e6ab4737cd158a11604eeb0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6be62bf651b72cb6c9f31eaffde9fc84

SHA1
87cada5e918ff6c59755bc06755ead2238fe245a

SHA256
825db6439828e01cd1af4cb8abb4dd4bc633215acd14f428f01c9f76d7e52f39

SHA512
75a042009d5f40bbeeea4ba698d57670fab26c2b7c11d1c4f549b5f624903337ffd06e0f737d978c18862779be49974835197d04a6cf014b30e47aa898506faa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
65c3bb685ed8414109e6d0e66e1a9c6e

SHA1
a249f946e98fcc120adb410dc4c28d444201b163

SHA256
7f84466b440948703d1661f18a4f66a76657eef901e60bf471481b9beb06b07a

SHA512
04ebe31e51775ca707bc1d5fdfc7cd6c711bea65f6b53e141b684d63de2f861a9d5db18fc3f774b2ecd1106a7a36ef06e081b05b4ef40affc3757ab8de387884

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3c4a5dc80cef3f1a107b79c6cf2e1325

SHA1
2f1c2d9e10783d3b9dbe11cc988a16d3bcfdc0cb

SHA256
b880c3e8682ccde2e54ee27cbcee423302d95526b692acc9fb80ef80cafd0140

SHA512
8795a311647f4850a7cad2d4ea31523f2b6ae190c7543177a8cdd1bf7e9c0ff0c30af7da0d1dce07a42af4979bf62ab3bf2c3c823eb6e21c7b4fea6662ee6f79

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1b48e04f6d339594ac22872d4b1a8235

SHA1
33a61f880cfecaad07b4897f70d4605c5ae17e98

SHA256
ed5540d577c63462a508bd7dd37fbbec0005d7e3f0ee4f05e8f4cd26635ebe5b

SHA512
754b790ee4765fa4fbb6dd3551ea029d2547c00dea5cb8c5f8adcb410beeb84e2644887555e9bb15249198cf5794a1322f746516a5c4980061546d4bdff9d161

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3fd968713c1d62df5778cd3504f36b6a

SHA1
36e26f3d228c8e5f0302c71333383ac6890992e3

SHA256
7640ca1b54e431367ea89af05dfd7270407b2a05631f12f31188c4d5031bc3cd

SHA512
d79c357cae87c700016e76d9541d2761bad5b1c1b017f99e7fb879a851cd21cdd87fc8912de301101edec53ec7b1d9218044026a0684c283857e23bb3776ee29

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
723fa6fca4021fb7a46b822a1528a675

SHA1
03d6dfa580f4d5c85ff95540027d36e6215f1153

SHA256
cbbeda98a5dad029d10c1cd6be8a8ec59236e3a569117334c3ab5868e82f89d3

SHA512
a4ed3cdc2678efeaaf89017eb171f5db796c11ccc3094f612868dfc47b9d97f6e8184915676c2f179fc46002f7a2303e2290a0f452cd9e030fe89c6a5499ebb8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
976209625dc7db3ef245a25ad4bcd35a

SHA1
86af66f866b5144066b41ddb92495514adcd959d

SHA256
79065840594eafbb466f74f6cb1c1d25eca9ab2f1fea6da196ee9e1fdd667f6e

SHA512
e392cbd5413a09c541cc5cdc8054782ca05ab70681cab32dc0a58d461db1fe1e861833a837e156618eb29ffd1973d04805f17ee68fb3f033ce26cb96394001c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
201B

MD5
164c8d5e6345aa8559301e36d7b55ebd

SHA1
91ae0b1e6e2a229c7731bb5013b631fb0a177185

SHA256
fa55d14b7b2a456320fa038e24a49214f2c3dd08b2aa0e4405648ba3d21b80a5

SHA512
1a1fdf46bd0e083fdcd2848f9be4df072be5058728b16fbae48819dcdaf9d3b3c2470e2727ad189b4d7b9a36b9bc3097f861010938c14dc7509ec5be282ab8dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
2ea4e0b65ea2997876f1db84f9eb014b

SHA1
36df8c232d0d46c6e5e89d4627630ab6f3438161

SHA256
05412fd0bceec5310a145ace8c2915b9d907fac9722222306d7e8db3cf8ebab5

SHA512
06d113ebb946141a99ea5d9834e3b0e551f83f60f5bc25cf0d9499076c69915bee582da92a7526b5934f97eea8a0030a3ac22be207f2d3d155dfd09ed674ce99

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
abe5727d224327844927612fc0f4ee57

SHA1
4d37dc4a6c94bfd92a68887dd511ba074e1ac0b6

SHA256
eb02bd0f602989fde25abaed8f6cf589e2fe771e4c26089ad4650dc2aa180ecb

SHA512
20c2f7b6af45cad040cde60c16476f7181521136bfcf91111f7ddfa7acb833afeacca11e326c40574307c01217c384303ae2bfd357137cdd6e4902c36f464842

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58a89f.TMP

Filesize
203B

MD5
230d0640045c5b6f59c5330088ce364c

SHA1
798d7daae4049e4723692fb9484c0d494d7d1ff0

SHA256
f07b94a1571b21f1539110a1a1407d84f735a76e4cd9a4dd4da53b69a3088194

SHA512
dba5948f793bb993d2e05a12e4d1bbe3912846797128ed740a0830f8a3138df13d2e8e66100952471378f4c89ad035d65df6095236fa22f57f90ffd8ae763cc4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
68f7fd7e0b2464342ed073f03e1fb398

SHA1
d6580cd2d9da9af35192f523fe838ad7ea48d514

SHA256
e87d56c48c54dd754a45857b77c6d88ce302426689df259616910e771fc6c7b8

SHA512
af4a16b139eb55b280bef6251632824a503c2e07aced2d39b453687885f3ed645d75cd757761054c7bdebf63ce040c21945c114391ae35c5b9b617401647ffa8

Download Submit