53f6660f0107f49f89d8aa1239cc7b69a723eb2b51876f6d25b58d2bf65c33a6

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
23/08/2024, 17:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bc96fdb02f666f88c8e482ac77e51f58_JaffaCakes118.html
Size

90KB
MD5

bc96fdb02f666f88c8e482ac77e51f58
SHA1

c5434f0525bf9ee5909b61bbd5a7b3e7bf255cad
SHA256

53f6660f0107f49f89d8aa1239cc7b69a723eb2b51876f6d25b58d2bf65c33a6
SHA512

114d0739b49728b0109189f4bc72aced84fc69169c7745076d0fc41fff961131eae4ca1ff91ea4cec1a09cf85bd7459ef9b84cf30d902f4c768d4a7383278849
SSDEEP

768:/qM8fQO8bKJ8HOhV73bEhHlVldSKGY62cu+WhOUFE4/izETtk2SCWNga:SM8b8WeOhVbIhFLdVgUxmETtQ1

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3308	msedge.exe
3308	msedge.exe
4480	msedge.exe
4480	msedge.exe
3540	identity_helper.exe
3540	identity_helper.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4480 wrote to memory of 3204	4480	msedge.exe	83
PID 4480 wrote to memory of 3204	4480	msedge.exe	83
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 2060	4480	msedge.exe	84
PID 4480 wrote to memory of 3308	4480	msedge.exe	85
PID 4480 wrote to memory of 3308	4480	msedge.exe	85
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86
PID 4480 wrote to memory of 3796	4480	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bc96fdb02f666f88c8e482ac77e51f58_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7fff779246f8,0x7fff77924708,0x7fff77924718
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2896 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4948 /prefetch:1
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4424 /prefetch:1
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:5732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:5752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3428 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,15362746956822202622,6259705820967644159,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4420 /prefetch:1
  2⤵
  PID:1180

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4832

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4716

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
71KB

MD5
da52e38c98b0f2047abeb07609608ab5

SHA1
da1210caff36df73e49a0c271ff7d573c2d20d02

SHA256
726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

SHA512
35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
61KB

MD5
468446a7240461af44b59ebb2047c231

SHA1
47b7c525dc91bece99df0c414960b9490b986ba8

SHA256
ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

SHA512
ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
21KB

MD5
e0f78790cb3a8b2bbfa790779c576bce

SHA1
495cefefc27651acc6055a8e06812ded11bd293f

SHA256
196377c90a2ecc83ccff630daaf67dd853e6ae3f3824eb222f1e18c2469c4724

SHA512
b89d39b8cf3890a4a7339bd91dcb81e91bfb9ebc1280364abf2826817c5b9152bb002bbe5a9cebcfff065b190a839446ce205f45e6eaada9914c67dc1093dd7e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
56KB

MD5
d4b166d7f09bd43b1989809bb1d37971

SHA1
86dd5388625e93dc6cfc0fc3d4efde201beb6657

SHA256
a0a2494b6006a35d2335e06ada4134cf5b7387918a857a201c86500db3726704

SHA512
88e359e79e4eff068eee465b525265e1637d943b9e05a60235fc0dd10a1c8794668c63f96db01bce0e0bc08e3797d59d5c278294a955d83effb1a74bc7a9a751

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
23KB

MD5
33a83c16527e4531fbfca2631f653674

SHA1
87a63514c262ba4bffc52d2ceebb3ca14353507a

SHA256
1156bb50a264543f6a9dc8922dd2c65d444c8bb11b3b18be95d5adff840b33b4

SHA512
f1dba28d0f81aa0894436ae7b4ba76a2e635f002f666d17d31b8b21500dc2321d7862ca8dcfd22e44aab4d1f33112c076dc95191c889546a40f9c6197cccbda3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
135KB

MD5
cb98a2420cd89f7b7b25807f75543061

SHA1
b9bc2a7430debbe52bce03aa3c7916bedfd12e44

SHA256
bea369fc5bdd5b9b473441583c46b9939232bf1f98c1cedf6bc2241c4f5068d4

SHA512
49ccede4596d1e5640a9c8e8be333f9c18812d58f02b2b15adb54172df1387439e9dc5afc4ccd9d8f0f75f092318bed68d3cd577338e88ef4f9373de8a07c44e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
3c6c13c7cbaa41a82652b33ebd067c32

SHA1
c30b058f7c40f3e1660150bea7f3435a12947f74

SHA256
79ccd51aa4ad2fbc47bed64e633e1f2f2c332b8f933fd72b53957d125336db88

SHA512
974c20498b04e8b38d16ff18ad32f0e19313e18fa9ad12a195fb8349c98ba1c245d01451840be7e8038f7a2d86eb9f9b20a79b6dcf106f9eece8dfaaf4b7309c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
e49e5e6f5ce7b5330b91fab6d0a2e09b

SHA1
eaeb158619a4e099852459897df2db540848a221

SHA256
68114319411404b9cabe4238afaac152500a7ef51d59ef91bca34f7118e192ba

SHA512
51457f83f7b16d9c0b790d6f995e386938e250dce50c7bcd1e0c3029eef644b37ed0b9df70944d3615959da66151125ad4d1891b6a8b202405800d3d7802ba59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1019B

MD5
c377f342736586bac40f86acf54eb621

SHA1
d9e934d359796934f88614daa9cffa0bb630fb75

SHA256
096c760511cdb7e346b63b2bd2f465df3aa6476593e3ee2ca9e6ad2dadcb5e97

SHA512
819aaee853a170d73569a8d7a7f3d3ea2255cf1eb528f106dd8da6a0ac754f159b7f40553794ef5b933d61125ea00a0afe5f5f890284ff6c79732571519edccb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
4801ef39871b53391b9b10346b8cadad

SHA1
dab7b2663e80a76dd00a2ac4bf88077ba0426433

SHA256
1f81ed188350b04085469ce2dffcb1b92f437ede016d0341bc83f18799cd8455

SHA512
6850171fbb9067ae25620f9d8dec5e1d7528708d94487c9d0f72cb0e78201f8b2d06c7364530a2cc85fa55b8c6662cc4c3cac57e5eca4d275463b84e69d16e47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d94eb7d1fe15e829fc898b502f740a6a

SHA1
0e3cc2f029793f25315fe8d24e636e5be9574418

SHA256
999f02d3c619f9b855aee295527d2d26b361d2ee3147b56fecb31a9506884ddd

SHA512
6ab5a8793a61b1becd218ae827778a06067bfd4634000262f6fab458d5d9b3fe7931762e78749b146bb43bf1b0a93f6e0f82529f155e1312874484799cf07eaa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5074b0682e923d333033062e58b6d05c

SHA1
d7613de1d73216d1ab64db02b29584edf1906bd2

SHA256
47cdcf3db2066fcbe5985d6fbd8fe42bf1b829ece9907ca30b74e5ab00f1a401

SHA512
7c20702f67bc227cff5fac074df78578fbf5e44a000f6536fb855f33d874697bc632806ae42f0b1e9663fe84d253bdeb6213abfa602cec97b5a427f3a77f5a10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3bf2a0816711d1eae7bd8757a1c59433

SHA1
b3e0378df12012bfa2930aa94834df601c814bc6

SHA256
31030e9704e3ae3450d86020f3616ab33d786ba8bf780b0ceceae526df51b393

SHA512
356f45e8de6cb8c59361187c5fffc377b7f33c2836e238136cb96273acc5403ad5477c6313e49a1b2f158ad53d713cf1e7e4eed8f551b5089e68f1ef0e8ec89d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
2e63eeefba0dbbe025653ff715f22e1a

SHA1
d2f69a5eb1b485c976d56ebd19fa2e4c2157e25d

SHA256
3dfdf98316facbf740115b59ae2f6af3eb1cb78fb6fe6a632af97fe81761c0e4

SHA512
f336d227784021af4e062fe08ed8f3623a83ee20bfc4accaa0d8fd1d465f1288f8abcc0bdbe8df906c068686c2a98e0609b1540cb8728bcb1a56f51fb0be4fba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe590100.TMP

Filesize
203B

MD5
3fe31e227f6faeab2c693dc29cee023c

SHA1
154becebf27954d46a743d0ded4844bbf257f8ce

SHA256
4d57c18c1932abe3f94f982df41d57c21c93700196472b63acb886743a9a8af4

SHA512
910dd6714f41ab3f68116e345b87a57dbb6b5081d502e428cd28b864acd4e295be7d64e4d221fcac80030e82a3977d0251244c65b1a216ff6243a974acc24fa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
d7953782d1e933763f881731a90ac11c

SHA1
5d55c4087d5a24f8b444316459d8759745066e7c

SHA256
6c23c2adffc2a01ba4a7396240462ffa30758c43e1a9330f4ee088a3dfe65952

SHA512
0dfaf5187a872a3ebc7baf32c24d2449d637bb83e2c6af4798ad97e64b14bdf18932063dae1810ce5d078f7ca3b4891d36755eef69e8645af3683be80acf0901

Download Submit