adb6da580c565be402fc787884935063b8d6a75e4411b0dcb2eda3c3d11f1b6f

Analysis

max time kernel
143s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
08-09-2024 14:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d49b9ba66e84d866f2cbcffc012cc624_JaffaCakes118.html
Size

202KB
MD5

d49b9ba66e84d866f2cbcffc012cc624
SHA1

90e36fde0c8d718a4a03b42798712102e7bca913
SHA256

adb6da580c565be402fc787884935063b8d6a75e4411b0dcb2eda3c3d11f1b6f
SHA512

3b87e8653a5baedee3b3ea5b0de7ba54262cb889f2355ef5a6efe38919f2cfe684684ce49b2f7be34f22a76163fd222ad7b05209a736a913bb33b7338cbdc0f1
SSDEEP

3072:hKQ4SPZD3UcjvG8rM2hFcXmNRSFlFt+OqJK1/O0PxhBjtTLCFY0ZRxiYHzxVGze:nJwXmNRK320hu

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3308	msedge.exe
3308	msedge.exe
5076	msedge.exe
5076	msedge.exe
3236	identity_helper.exe
3236	identity_helper.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5076 wrote to memory of 3140	5076	msedge.exe	85
PID 5076 wrote to memory of 3140	5076	msedge.exe	85
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 4052	5076	msedge.exe	86
PID 5076 wrote to memory of 3308	5076	msedge.exe	87
PID 5076 wrote to memory of 3308	5076	msedge.exe	87
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88
PID 5076 wrote to memory of 4892	5076	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d49b9ba66e84d866f2cbcffc012cc624_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffadbad46f8,0x7ffadbad4708,0x7ffadbad4718
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2916 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5732 /prefetch:1
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6428 /prefetch:1
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6692 /prefetch:1
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6600 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6600 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6784 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6276 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1968,18072719682585832940,13033626433429632443,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6552 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:224

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3720

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4184

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
45KB

MD5
aa6a698d1c7fc6d35265b10af5570e9c

SHA1
00da372ad4964a5d5b8afff7fe1b207ff284f232

SHA256
02f6ae7bda59fb1a20d3386021fb972ced348bf724fea42157225d416f9f049a

SHA512
f5b2f732e899cc0fed577e1ef1c51c154ede5d206543e8ac7c1fabb182901f8e93e137b63f12cbb87b3f570a283a368bfb1b9d637cc5b1c4f1669ff5cfbf306b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

Filesize
23KB

MD5
33a83c16527e4531fbfca2631f653674

SHA1
87a63514c262ba4bffc52d2ceebb3ca14353507a

SHA256
1156bb50a264543f6a9dc8922dd2c65d444c8bb11b3b18be95d5adff840b33b4

SHA512
f1dba28d0f81aa0894436ae7b4ba76a2e635f002f666d17d31b8b21500dc2321d7862ca8dcfd22e44aab4d1f33112c076dc95191c889546a40f9c6197cccbda3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
f7461a79d4a6dfe3dcb901421bba5c96

SHA1
3d74b97b9e5a2ea47edbcd184bb519e3c8d14e2e

SHA256
11ba84f9bca41f77dc2aab02c6435a21ea3add50dd42f3d1c3abf1c5390fbf22

SHA512
6e447fec8f29d63102fa3e73f4aca66cce899a9e317242cf6639288fcd79b4ec369203174f02a8cee472c2bd3e9770934d794ff9ac989820dd35d444545fb157

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
576B

MD5
b4115eb0b56612258f3634a75fa43cf4

SHA1
e9b60a99295a94c9ab3b77c5fbdacd691ce59fcf

SHA256
d3d4e8b07494fdfcfede4f1d3259403f61570a6a2de9d997b57f90353bfb50e9

SHA512
ad8e3d132ada7023cc824100473bd86b761dac0916aee4d1840ed01463ef8025ad79ac6cf6148cf226421ffbfbbdfb73981dc9ff40f8df94ab6c166774905dcf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
0d6c9fc2dfd9e699b00f6d3614412402

SHA1
05c92363bc671b45b0033c72b114d22b833d8f72

SHA256
a2812331b65b703b971561b0e9fd6114384d93312cfb89d0bca73bea8034fea2

SHA512
1271b80737fefbc6a1f6885d1124d9234efbdd2d2dd77568bcaf988b745e228a54eedde55dc9da384d7389beac5e16f20490a9c19511a37c227d944730b2ba21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
6a92cea116e645f683775936d95f7efe

SHA1
9c943b98ddddfb3e5921ebf1f12769570b1fac2d

SHA256
f1df0b2384558c4400b4b6ab5d9c4e9dee68185f124aae2f820dfea76b262479

SHA512
75643c27e091062335b1652b7749ad38fc6e5e41ab8ee3d16b472281c0c4885d55c4d3299c30b5e0dab3ed14ee2f63b1db76d2b471e1f94cc698b6dc271e0781

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
d1c06efa144f302ca3216d675fe6be8f

SHA1
e4b6b817ec99c9e24809d92032631754f09865a8

SHA256
0d26d583e532e39044ea8a1f62c85e9609d9bc14517c09c9fcd1b7430edf998e

SHA512
674097ec9fd1b3b37a0eaa5c95fd9ad7852d18c67d6c9b2563b3e333dd178c0ec0c2b843b7ed9e9ff022efac79c461abfb0fe16ce742de456b63ea4e5837baa2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
91a245dc59116e985438cf267c69b9c3

SHA1
eae2c986943517f726ca952ddcca816f95a88988

SHA256
77c6432515c79a835bffdf74cae00f08fc3613222b2843568ed29c303cea5626

SHA512
a9421a43c627170631639afeab887af02e031551f197643046b7ecdec0a691cf6090cf884155f5c6f4208682b8472830ce5828edcea69de2d36033d24543eccb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
01f8cabc0c2d6bc10a810150054b65e2

SHA1
4f369596be1e20b13c97e783fc9cbb7ff2b93db6

SHA256
769b4f5d972d23ee250b3f89646af21fa932b312b6b495c189f381d765376aec

SHA512
434a8b4c53f16f4484c9de0b38213bb9aca02b554a5bfb616d4900ec4ecd68b53b486ef58538f880dfc173a54c08316ff8027ddbcfee56cf4bc467945ac39734

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
78bb4de5dfde9332d26cc786a611f45b

SHA1
e4375c9fd5b991c7924b09d82e7b33b5db893799

SHA256
d768a6f51a3244b726a43afb3b50b9ebfcebc167e90f7c9d3c935aa894083d8a

SHA512
777665cc6c6cc9925b03b4ed0277bc5433a2b25922423bcfb64fff5a417fa48a4dcd10001bfcb99e8007477a4425f7d553edec419c40dda570f79cb55a4edac1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
ecf5c1c33e18e6b970d1471e7e99d0f5

SHA1
7081d5159ebfd55c991e7a7603dce0b9f3b88824

SHA256
5859fad6ee7932f3a40a4f18856c76e897f4731b2667f444262a26293d34ded1

SHA512
6dcfd79f9020490c1426980d146a5523b248d3589b50b6063c3498907aba3ad2cfbc4bd16e3a214a1cb2b966b66cee3031845574cfd78280d6a8938a06fe0dee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
0b6b9deb4ce6eb0b7a26ef607a5458fb

SHA1
d632cd025fbc24fcdafab288f99f66d85cdfe57a

SHA256
559236cdac93e739bcee6415979a41d80b886f3cc4af002811416aae8d7d4dc2

SHA512
42eefab43015623a374ade4a1bc48db1e96fd96557a92524a097cb81a17d74d1bea25a080da85328da261d5cfc4822a7f3264acb60c9cb8f0b41f931f137f424

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5820f1.TMP

Filesize
704B

MD5
91819ae8dd6d472a7ded5d52c3f78b91

SHA1
1fc5000050bcb1cd68f56ad630a764762084a65e

SHA256
9f77939ed8b557957a42122b6c489fae67cef9c4f9d07cef53851a5619ba23ad

SHA512
80bb536355a928e52232722ae45d1adffd7a795cddc2f34c58134fc19149a776faf402368e0f697d2f54d1c656d6b3407b3ab7d778b16effac91cba4b0e7e9ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
0ba5391cf916098c522fd62bfcb0b4fe

SHA1
455d3f827c34cc8c0fd438a26b1d6ab62290baca

SHA256
eddeb7f2e0791138926e5b4b27a079b77fab35bbbd17c1c0f15057a45575be49

SHA512
176b74711ee182092d09a8e05987a55d40c305584a6d1d0220711544edf499578fc5c7375796a0ad87bb6cdf1abfa93b00492928a31c5eecb0238f0deecbb017

Download Submit