91ba1e8e4cb375dd0477935fb350948c1b505373355c76fc51abcb4e8ff23115

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
06-01-2025 05:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_10f8b381cda22742517acdf6eacc3c67.html
Size

53KB
MD5

10f8b381cda22742517acdf6eacc3c67
SHA1

b342407177485bad16976fcb0bbbe2f558bda6c3
SHA256

91ba1e8e4cb375dd0477935fb350948c1b505373355c76fc51abcb4e8ff23115
SHA512

8ba5cf22bbba7db63dfdb83b7bcc6aaa6ba9dfcda3cb54d93fef266d68fdd7d4b645721a3f4f7c5f3edbe41c550e33859d042080ba57fbc8595816f15c0ced3c
SSDEEP

1536:E1wgr8VSeO3zBZEdX0toaaS6cgRr9s1mu:aeO3zBZZtoPrs1mu

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3672	msedge.exe
3672	msedge.exe
536	msedge.exe
536	msedge.exe
2396	identity_helper.exe
2396	identity_helper.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 536 wrote to memory of 1832	536	msedge.exe	83
PID 536 wrote to memory of 1832	536	msedge.exe	83
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 1076	536	msedge.exe	84
PID 536 wrote to memory of 3672	536	msedge.exe	85
PID 536 wrote to memory of 3672	536	msedge.exe	85
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86
PID 536 wrote to memory of 3144	536	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_10f8b381cda22742517acdf6eacc3c67.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffabb3246f8,0x7ffabb324708,0x7ffabb324718
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4044 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5628 /prefetch:8
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5628 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5936 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1061007970787634978,5455907556728008755,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6484 /prefetch:1
  2⤵
  PID:4804

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1180

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3772

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
85ba073d7015b6ce7da19235a275f6da

SHA1
a23c8c2125e45a0788bac14423ae1f3eab92cf00

SHA256
5ad04b8c19bf43b550ad725202f79086168ecccabe791100fba203d9aa27e617

SHA512
eb4fd72d7030ea1a25af2b59769b671a5760735fb95d18145f036a8d9e6f42c903b34a7e606046c740c644fab0bb9f5b7335c1869b098f121579e71f10f5a9c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7de1bbdc1f9cf1a58ae1de4951ce8cb9

SHA1
010da169e15457c25bd80ef02d76a940c1210301

SHA256
6e390bbc0d03a652516705775e8e9a7b7936312a8a5bea407f9d7d9fa99d957e

SHA512
e4a33f2128883e71ab41e803e8b55d0ac17cbc51be3bde42bed157df24f10f34ad264f74ef3254dbe30d253aca03158fde21518c2b78aaa05dae8308b1c5f30c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6133cdc2-25b6-467e-bb0d-bcdcaa849152.tmp

Filesize
6KB

MD5
86e8fb8ada95f93bb9da5ba9b34350e7

SHA1
c7c8f8801b7b2574b29ed7d890e8a909e83fab6c

SHA256
d0625656a18901552512dfc3c3ce4be10e3c2aef86c8538a752459f6ce1e921b

SHA512
52ab13a30f14f15e953ef783b9efbcf4236c11b836d06c0fc27c5f3567027bc19decc262278ad59f05c358823ae7da431b1a9969c48a24761e408dd5660e61cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
71KB

MD5
da52e38c98b0f2047abeb07609608ab5

SHA1
da1210caff36df73e49a0c271ff7d573c2d20d02

SHA256
726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

SHA512
35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
61KB

MD5
468446a7240461af44b59ebb2047c231

SHA1
47b7c525dc91bece99df0c414960b9490b986ba8

SHA256
ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

SHA512
ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
23KB

MD5
7e98564be3c2fbfe5d55ebceef08fb8b

SHA1
4b35415b61c5ed813f615475df2d513f5dc73d5f

SHA256
b9a21d15fe5b99b73ccfd9f8df4213debb40456341e1e71d0848b3602cad2ad8

SHA512
4878d6d53441aab8c306b67a0e4051fe9fa0aa5377d6ff806c6e86fffb042c41a82efd7135754d9af1d6fc571fd23e3da37e680eb4bf983ce08de72421b0259e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
52KB

MD5
f9ad6fffe23fad04422671cf2fa4a661

SHA1
b8366163961f1689411636988a73dbc16d13ff3c

SHA256
f0ca592df98944df58f4c281890809d30fd2117e471b8021ff138314efef5dab

SHA512
e9d95f4f0eeed04413a1d798161d1c20d876f5ea4440c13e9fa356a562e931f98d84b3f6a907d6541cf6bbbd7e84f0e106b48fe2f5fcce77d66f70e114834aa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
75KB

MD5
c0139a4fbdafd457bbfc9b51ba635ec8

SHA1
a80b4b6096128df22af763bb4862a98cbf88ce20

SHA256
fbff5cb567a39370d5657c7dd15c617cf5043c966243c3c08fb3eceae894f9be

SHA512
4c121c5fc109c120c6e7fb218ce26d29754a5e7ba6f368e09a8a9409e31050bd1b63ccafc36b2754dadb7548777620892a01366ab350ad13022237f406679bc4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
116KB

MD5
226ebd68f085b8f729cbd9c55f4a5934

SHA1
3a8039b94f20da0b2cdf48a6dabb839d3fc090ab

SHA256
4f0215332edb60a76aff5ba0549995864ed2c67b1cda48855b8be5a69b932ec3

SHA512
3be51067f5ba8b0ca5531625c9ecc92952fae66dbdca88484aef46e2d727aee8b2355e4928ade809137fed399d326d94889480f729c17694c5aea18e3d022518

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
ac900e50d40d2625af5481b522fe3780

SHA1
8e5169e57d05bc5b2f2141b3b4bd6151d36aa7ed

SHA256
ad9234ca55b78f9ce27053276fdbfdd7fcfc6d49655ae0cb67f394cf1ab6a7b7

SHA512
58d1e50d20e5d20ce5876a2b8199dbf3b2c87d28a51e04452ea14e61b90d6c021e540a1993fc8990a812883cc877b4c720e99114632b9d59217bab9357bc53e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
0296648de26f2cc92d39159d3f1258cf

SHA1
8fb6215575ad36724d38743f560a5475706a6640

SHA256
25f6198f73cb87cb089b8c64118fa62345763140d78c15a3da97101a5de5a97b

SHA512
b0375272435feb3aa366897241497611d58d581b65c8422398d79cc3910f5fdad30ec8eafa1b00f192cfe9c1fed56947b38688363005637a7a19ac1d8d7301dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
4a8a237c26968a60c22b689c60cd893f

SHA1
6444fd6b1a919efb978f03e20d4259d8375eb015

SHA256
252126a31aafab0e986997e1214566bea82197e18622dc0918b0cf1ed4272403

SHA512
20a805033d933a978ee3a2c72cefdbd0409aa3e0d589ec279f6e0efd70b7a7167d642e08ba6008e00ee80f25fc2fb1af40ea4ff90a4808a0acd4f32d92cf6f15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
e712c5c3b00559a16a1cea2d0fe2ac2d

SHA1
7224d242d9207f712f7a40249f1786d9901512ca

SHA256
befa23e8a955bdd72860e3e7e6946e082d93af78605b2bf8494597226d173afc

SHA512
c526fc0eae6c8ac841dc68cd51425abb240fbd4ddc66e1d7ae2021946d318709ef3d0c19f47e25b464f42c801c33653f3ec103ee59815a46b614d02637964b96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
b1fb4b4416e3f44634b781d06573d75f

SHA1
809930e10854e9ed0ff1628ba6d0a7e7592f2b0c

SHA256
68a4d2a1c11aa15218299a4e8e83582384c33f7cc00d8f2f1897229b657a2ec7

SHA512
b4fea0b68f2114b58386f236186c93a0ac41d6ba9a4535926bcef717cb07b7f21ca970f58feb505bb610e8ed891473907c8429546b35d12a79aa5b26fe04b99f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
927B

MD5
5fab00382046f321b2c25f7d446c77eb

SHA1
fed08ffdabe8e93a4bd45ef616a5040bd616426d

SHA256
80087d8ea760d46bb50e870c2562164f58a009915ff750e878ba68ab05c703ae

SHA512
3da27f7ea230aa8962bbed35f19e0c20ec261ee8dba9f8ce6e5ff6d229da497a94561dbcaf9d4d9f7fa812989e1bc8382b5645b066e57d686697b51e40d852c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
896B

MD5
a61668e938152b5434e265f5126a7684

SHA1
b4fc2bd46fa0ee9094e9633115a667b4b96890f8

SHA256
944f139fd8c2fd78f8a794f0490d32d7e1b53cd117bf7e5c4919178f04bf3ded

SHA512
4f17d1027a8c4cd1cf53003043557fc00292e7919ca50979e941b49500d15a988f7fd59ce4983a44c3bc8622b7f653c8361d00bda29e795c75f2219a3648b1aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
787b85492fab47873c14e4fcdbebaf27

SHA1
4e384624f8bee8ced2dffe2eae9e626f50010e98

SHA256
425e6e1cbcf2e6645d7b866f3dea00d6bde841427ded2572bf195f2695f987d5

SHA512
86bfbf6d45e6911906ddb8d981e7c6b270115685885fd17a9c2277a92e2c649dfd4c6a0925badda35cdcae1fee08b3fb45d725e9ff5d7658578d7058671ba030

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
deb9b4dd1048ba9d07711bd9d72e97f2

SHA1
0efc2d645f6941c33f398b15538696a312bf14b1

SHA256
a3ca577655852b7be055c07663acae5aa78a681ec808a92554f89b9d3de998e7

SHA512
a4d690a074960c4fa822b426fdc18d591ee98b87a4378c272fdec891b55022aa229623fd13e42ef37ddc331ccbf6833fb5d0bc7521d796d2f168af95230c0b08

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
fa75cb9f900b5778265a224b1175ea47

SHA1
0fa5c8d4458991839ef268563668cecf44d418fa

SHA256
0af1329de38a08fa4813ae5752d4469b8701fe7d25ac57204f0f2edef375e456

SHA512
c47ca9f907acbf1e72cbf636c1aab8c4502f862397302ba0d4bc3cf9bdff7beb7cb446ca3ba1726220b061d3d5a8d906f00f71bc90910dcd599697cd5e44a981

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
59e89a6821a715084e23dc260a05a148

SHA1
f3fe2d0cd42f67c890a6fe17671638a80260a395

SHA256
06922a8d72d18aba67cbfc89b4f384a513dca21d38f2a87ade5f044446f23003

SHA512
cad6846e8d5d2a25f00fe6071769949b73c57fb05b63db9a0344c7dd6c3ae29a607815000701af2c9491e92b8dcc73d854f81852eddc83af9b6f25f9eedb20d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d114e61c63cd098936426af2b2b79dc0

SHA1
348a0740d3de3b73b0cbd23ff2f5863822e03613

SHA256
8e73e37bd387c5d06d2bb5251d968205795452f834aedbae7e1c46e3674ee281

SHA512
8ad86569b4dc30cf7b52d38886ee11a091919270d6c7d30281e181d0edbaa308b35708e4af586eb506dad9f183c4d4ff7a4aa8a0fd4996a984d45185ea2d019b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
f90cf01f0f37bac32d60ec67f7fa24f1

SHA1
d4601c3dc07718ffb5378735f3812ef0194ea4d6

SHA256
4d90f9f837127d684fe49b0a8afc1197fba7cdd8a015c56f4274b0be9a42cd19

SHA512
d8bd1f528bb56c0896131c9932656b2a48d0579b00a1bf88ff39cc545d0150941bfdad3302cc5c7b4bf08a4102a45a0f42ac82341e6084370da6d9aed8c9b286

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
06e85572a54d6a0787c2108100922398

SHA1
4cecbb56e0bbf9e73f23317a16c4177f6a0e5e6e

SHA256
41d11584a085ffe33ef8fd0a4085774af548e9292c9650417ee91078e7b13d3b

SHA512
c17414553c5b686954e92369cc54c272b880e2c98520ba652b98019672e129b62411d90c5d9fca7f1f2c69ee836a0570794549db19c5a2b2f555ff3f678e6ff6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
e0f016716851b98d16bb4359af3876fe

SHA1
d34c584e960d2312d1bdafa0db67eaf1c26dd4e6

SHA256
9f2c2242b4340f1de7f6a530367646f92a4f7d8959ba5e061a24fac692c5a504

SHA512
dcd250f4b5b12d7501d82541bd71bc4a1a0f6ed7ccd72c0267c80b99cdc28008d2d286ab35ccad7f373a6a135eafa03d4bbd71539667900e42d10607bd3848d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
33f62065566f516028928ea26b1c96e9

SHA1
008076c6b0e41f03336bc1a4b44eca3d544643e7

SHA256
34b412f514efc718431491155279bf72cd48bda725a1461646944ba0133c2516

SHA512
468a61519db1e6c5e941e3c717f62b5f37a029977cab701524e7fd7eb1a8754b41c6b3c951a4473fc3756927d5f5ce33c8600a1bc4dc8614f7a501e30416d545

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe585704.TMP

Filesize
203B

MD5
7a5042d0ba2cb3d2ca6d665e146139a1

SHA1
889c429eb349ec6913d4feb1b2d04fcfa6b17101

SHA256
bd07ac959aed476e97b19c206b0c0efc684edc42fd5101d142772315f04d89b2

SHA512
d48852370fc764c44ada07e22e7772cc6e61a38a685b1425077d234d2e45be3ea65f38469cc37541ead597318ac1027662e05d2dc8d5f08843d24695cbaef660

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
6adf3fd62abedb190e6df30944c57ab8

SHA1
82cb93eab3490eaa07b71c22cbe41cd28868efc2

SHA256
641f2f23e8a46326620cb6275e774861a6b3c90e83f7c9e33803489713690098

SHA512
de5a9b249fb7d83d1f30753d788cacf5c10711c70e16f1df41713719608b6dfdaa6b0a12e471db26388bdca8521311ad79d8c47ae3a84b46931a88660a3f28ac

Download Submit