3059b4a80bd4a5b8287bb3fcd97f302ff02a551efb9320da68f9b72750538afd

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08-01-2025 22:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_b1068dad6621cf5241a1e040b036fb0e.html
Size

66KB
MD5

b1068dad6621cf5241a1e040b036fb0e
SHA1

18d42410248cddc8071651a95a660b03252d00bf
SHA256

3059b4a80bd4a5b8287bb3fcd97f302ff02a551efb9320da68f9b72750538afd
SHA512

f2d6c97894329062392ea4a4208212d20a0571f877d410958413c89417a9d4c5e91cca5dc3437e36758b4133f72d5fa5ff736ab77cf271d9c2ce64f275df9af3
SSDEEP

1536:ERwgr8VSeO3LdujzAoTlDTmaaS6cgRr9l9J2NMhbSv:meO3LdujTlTmPrcNVv

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1596	msedge.exe
1596	msedge.exe
32	msedge.exe
32	msedge.exe
2872	identity_helper.exe
2872	identity_helper.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 32 wrote to memory of 4588	32	msedge.exe	83
PID 32 wrote to memory of 4588	32	msedge.exe	83
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 1596	32	msedge.exe	85
PID 32 wrote to memory of 1596	32	msedge.exe	85
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_b1068dad6621cf5241a1e040b036fb0e.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:32
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff95aa946f8,0x7ff95aa94708,0x7ff95aa94718
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2552 /prefetch:8
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6892 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6892 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6032 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6160 /prefetch:1
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5560 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6560 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6660 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4032

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2176

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5096

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8749e21d9d0a17dac32d5aa2027f7a75

SHA1
a5d555f8b035c7938a4a864e89218c0402ab7cde

SHA256
915193bd331ee9ea7c750398a37fbb552b8c5a1d90edec6293688296bda6f304

SHA512
c645a41180ed01e854f197868283f9b40620dbbc813a1c122f6870db574ebc1c4917da4d320bdfd1cc67f23303a2c6d74e4f36dd9d3ffcfa92d3dfca3b7ca31a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
34d2c4f40f47672ecdf6f66fea242f4a

SHA1
4bcad62542aeb44cae38a907d8b5a8604115ada2

SHA256
b214e3affb02a2ea4469a8bbdfa8a179e7cc57cababd83b4bafae9cdbe23fa33

SHA512
50fba54ec95d694211a005d0e3e6cf5b5677efa16989cbf854207a1a67e3a139f32b757c6f2ce824a48f621440b93fde60ad1dc790fcec4b76edddd0d92a75d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
71KB

MD5
da52e38c98b0f2047abeb07609608ab5

SHA1
da1210caff36df73e49a0c271ff7d573c2d20d02

SHA256
726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

SHA512
35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
61KB

MD5
468446a7240461af44b59ebb2047c231

SHA1
47b7c525dc91bece99df0c414960b9490b986ba8

SHA256
ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

SHA512
ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
23KB

MD5
4d0a129f673aa918c6b36f0c6a1b54b3

SHA1
1b5998db0684830f7dd9ca9195ed9b67ae41ae69

SHA256
bcf5af55430e185909efe68a77f35249153e4379b6cb3b5a047b1cd221ae48e9

SHA512
81170ee7b82a75d85ad9df8226d5d9f6f88b8ddc4ddbf4e0c732ee9ba0a49ffa687cc42a91d91b5fd4bb39cebbfe0711f84b0b790457fdef5e9e72b5a2cf04c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
52KB

MD5
f9ad6fffe23fad04422671cf2fa4a661

SHA1
b8366163961f1689411636988a73dbc16d13ff3c

SHA256
f0ca592df98944df58f4c281890809d30fd2117e471b8021ff138314efef5dab

SHA512
e9d95f4f0eeed04413a1d798161d1c20d876f5ea4440c13e9fa356a562e931f98d84b3f6a907d6541cf6bbbd7e84f0e106b48fe2f5fcce77d66f70e114834aa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
23KB

MD5
4bf45c37b6fccfe308533e93d46244f1

SHA1
a88ddc0ad11510ff86de30b94dbb63cbdb506d81

SHA256
fe0c5130e81cfd078437cc38fd73d94d4207b47b6ae74d4a16e1dd8281e2a287

SHA512
9620421eebd8496cf4d8feb35d82b3ee016e1908e483e74388442aac179336a4df28806d252f26338988f301a8906db97d1ce190cabc1f6849c30e3e8ae9e6a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
388fb97c6930412481769e712ee9a9b7

SHA1
6604c01e48ef42bf351f6837c78ded7d59f0ea32

SHA256
ec456270dfb1d350c045eacfc0adcb1c8bbf9532a7baa71584fd5dbba4d8e006

SHA512
e6c39d9af6b8c79c64a9a3ad729017036c7a25ac5eac56a712bd425103c1f108b040a58778df7a87d827abeec8db7648490f3d76d63dce8ee375e6a846951116

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
d1507d2414f61cf071896dafd76b4be7

SHA1
d8eef79e2345efed5fbf396afa53b781565bc709

SHA256
0436f38f0d8a8fb65d35ed2023aa54d5a49b5cf02efaf2fe6d26ac42c5c6dc0d

SHA512
e032dbccb6f4c7e2ca174362616e2069517538da8b0915766dbbe337278ba06afed76d3618cfb69a21fee98767af307911f85a3734d681a256348e0a599dcdc4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
16abfa39aba1eec855b47e7107d66b66

SHA1
da336469868a73f3e27160d6ad3f68f033c4b6a1

SHA256
6106f6964fc949dd180fed0fbd26149512240bd94ad5737e60347c7d63575206

SHA512
01929522467ad50e4b3d7cd2130b9ad945172904944093d6341d2df64d862b7f4ac8679b88efcc7825f08dd442ba712bc09e0fdff39c7492f76ef92833c1fa35

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
817B

MD5
c26096b5f0feab37efcac35d779eb1f0

SHA1
46639e5d434c96fef81c34e3b5afeac1b7e8e685

SHA256
d4486f20a51ce066e4dcb6e8f8e92f1813d99cd892895bdc17019ea3c6a53081

SHA512
daff6210c6d167d7a77785a60fbc0f779d1bffcc21e1999690992e89e80e33b5e68aacf981ecc69536aa19ce009f4e7ad73fcc3168cabd855241a567651b5869

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6ded5b34d73ccec7ee53e2cdf9fe1958

SHA1
0d8b5e3f6e732a87b4d4f06db3bcf19b60f5bcc7

SHA256
a98da26602a9292becf15fc81ed0e3492807c38745afc3a15bca998ada7a149f

SHA512
48988d9b931d6c19dd888505ee30408398a2145ce1a31f65508073cbdcf88cbe32f78b7b296790cb0f629ccfe6d3f2f142e39fbd86fe72ee8318a19031dc5bc3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
368990b7f43f086505a17f47fe6bbf3d

SHA1
ffa64bd5da48579f668f6df28908e3a64ebd600c

SHA256
a4a8064d25af7a8f2fd505c3d44cde0f28ef84ab1787b1dbdf065c105eb7e8ae

SHA512
4972598cd106993d5a77c6d072126dd87d61cf887b3ea33754b505955d5be2fa7c818ae97bee8bfaa08f000955d573b9a382fefd70dc0e3b8160c5e90684e269

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e0ef71bf7e7ed097711f62c7a3bb1809

SHA1
a4cf3854ea75a766a56052237921020e2aba852c

SHA256
311ea23ecfa252f0d2faacf6c4ca75f2a8f5fe90d6e7c676e087833f61e3eac9

SHA512
2f1dc7e0437bdac0da0620d94a97fbfba155fe63467732bb628ae658e4dbd0e68c311830ce1331ad165fb348bae98de8c5a54b68b476d45c677a09b537060780

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
87394d61363e93342d8ce6dc0e547f5b

SHA1
f2b9b50f60434517ae85065c03f647282a5cee5b

SHA256
2d9752bf058519cb64b00da3194fa4697d3761ba67774eecb5d8b23bef9b640f

SHA512
a8b349aa1504a2bc793783d1cb48e6aa722d096e458b81770bd6bf91b1cf57c0fd7de3d0e271ec19517f20b00d0ebc7e1747311a16a3a905b787f2485f70249c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
232020fcac17a5cf4ad2b5b346749c50

SHA1
a0f63449ec12a2a807cb3ad11623302b72d36896

SHA256
382c3190ca2ce3c2993b409820c14354a54ddb903b7b21a0f77b203fd3bf341a

SHA512
9c2bb3a8aa67d8ea3ee34b605e9695417af88e331161ea3afca74d1a375e620216f97da3481593f8664ba8b57fb825d5710d08a1938f7726b3eb8e38f5000b11

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
d9a6f86b49e40bc12b5e303857b419d2

SHA1
3d5d49e2c3d708247aa6648081c9858d00ca2b3b

SHA256
ee523e69dd622a71473b949cc229a97223e693ba1591124dca94579aab9cb397

SHA512
bb3f53611e73e04401f3aee8b7ef834612de377a4631539897ef48be93224795d05bd3e1109d503f59a57831076431706626a1a50d3be620ee59e9dbbb04fc00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
547a6ba3dbf248da43bc430aca3f3fd7

SHA1
bcf0e222bd10bf6621e346ac6e82729a9410da2f

SHA256
d44f124225a54f0f9b77cc21285871281720e400acb7c9e31a88096a5ef5876e

SHA512
d38e949e2fb590946a1bac363ba1f43cb47d5b24f3019e40a6c648750c0fb61e5e7152451090970324a041db34ec98af9e6d06ee41ae2557e3bc4e35a634b833

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5877db.TMP

Filesize
203B

MD5
fe65266826b38162f49e654951acfbf8

SHA1
725f5f2c57daaef96e16d44be9b7214208f32a56

SHA256
12c1fb46ce82d64f8747bb8a19410e74a4cebd1fa1975b49e083b1b3d7b7d8e0

SHA512
c432fa9f731cb31f8fac1354980f957da73e9c5e94ef52562c605e98322387ee7a98bd9051afe935fe887d1dda65ed0048a211dbefa98cd7c9ea8a0e1dfbf022

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
11b502ebae1aa9434795ed9cdc1b10b1

SHA1
0e6bb70edf411810f5c4ff1467a392f3e6fe3025

SHA256
7c360ba04f8cc68913fe2ed1523947c419d1339bb72def12d7538f99f364cadd

SHA512
c266efb1dfd3fa522c4301c1de041f0ec96a115341225f3cc35d9930dc9438fd7fc243eaf7a89db325ec9bde701075d447740cc91fe9f4b481555579b1535e05

Download Submit