7594759af871c49a146ddfc41d6b1a89ade3eb6f4f9a354586ef56facaa9d2a8

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
15/09/2024, 00:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e14f498adb7e873f16136bc711211ecc_JaffaCakes118.html
Size

66KB
MD5

e14f498adb7e873f16136bc711211ecc
SHA1

97b443f4a39c46636027a27eeb2652d5562a0475
SHA256

7594759af871c49a146ddfc41d6b1a89ade3eb6f4f9a354586ef56facaa9d2a8
SHA512

59beae873464b0ddcdbe794a6ffb04a065a35e9d6be78f3cf70fbd4873ec080986163f183fbc7a4fb79711b6c22988cd95e883e0f5eab695b3a1432bce55aedc
SSDEEP

1536:swgr8VkeO3S+GYTOyuIGpvZomXbKC0oaaS6cgRrYC1N/:seO3S+GRyuIGpmCb30oPqC1N/

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2940	msedge.exe
2940	msedge.exe
1372	msedge.exe
1372	msedge.exe
4540	identity_helper.exe
4540	identity_helper.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1372 wrote to memory of 4604	1372	msedge.exe	85
PID 1372 wrote to memory of 4604	1372	msedge.exe	85
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 4576	1372	msedge.exe	86
PID 1372 wrote to memory of 2940	1372	msedge.exe	87
PID 1372 wrote to memory of 2940	1372	msedge.exe	87
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88
PID 1372 wrote to memory of 4532	1372	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\e14f498adb7e873f16136bc711211ecc_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffebdfc46f8,0x7ffebdfc4708,0x7ffebdfc4718
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2692 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4092 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5188 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,11288765368895274924,15063227473461311342,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3908

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1892

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2416

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9e3fc58a8fb86c93d19e1500b873ef6f

SHA1
c6aae5f4e26f5570db5e14bba8d5061867a33b56

SHA256
828f4eacac1c40b790fd70dbb6fa6ba03dcc681171d9b2a6579626d27837b1c4

SHA512
e5e245b56fa82075e060f468a3224cf2ef43f1b6d87f0351a2102d85c7c897e559be4caeaecfdc4059af29fdc674681b61229319dda95cb2ee649b2eb98d313e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
27304926d60324abe74d7a4b571c35ea

SHA1
78b8f92fcaf4a09eaa786bbe33fd1b0222ef29c1

SHA256
7039ad5c2b40f4d97c8c2269f4942be13436d739b2e1f8feb7a0c9f9fdb931de

SHA512
f5b6181d3f432238c7365f64fc8a373299e23ba8178bcc419471916ef8b23e909787c7c0617ab22e4eb90909c02bd7b84f1386fbc61e2bdb5a0eb474175da4bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
71KB

MD5
da52e38c98b0f2047abeb07609608ab5

SHA1
da1210caff36df73e49a0c271ff7d573c2d20d02

SHA256
726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

SHA512
35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
61KB

MD5
468446a7240461af44b59ebb2047c231

SHA1
47b7c525dc91bece99df0c414960b9490b986ba8

SHA256
ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

SHA512
ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
23KB

MD5
d0007015af7e55b5874b6f7711e9ab67

SHA1
fd514e45401ab3c27d2fded42f34024260086150

SHA256
95c98d45b7481d60c8078e04973ca86a67833927fac958ed6d8c28593454aef3

SHA512
375ea404a1c847f5b5e10803277d6a54fcf22ffdde3f41a06efbf4732858d749488b7ac67ffd9461a3d0b7bfd8f18ad465946cd4123c54383a410db6e699a6df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
56KB

MD5
1affe2accd04b9ca38eaec2c1a4962ba

SHA1
2d019f5944691fd31d407338eb124ca54beb4686

SHA256
52cff69204aba9de35b3e7eadc3bdc3caca4017eeb9b71ace20488ba6d8752d6

SHA512
93061407f3778fd9eacfefdfb6291b8544630aeb09fbcedec333a039eda460877523370f4154b6c91a5cfd97d6096727e0be3ae9e04c582dbf9095674d161859

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
67KB

MD5
a2c26d1b3959017d9ba05e487d5398aa

SHA1
6215b32ebb3904e7dd7f815333233f7c6b56b76b

SHA256
9a77d4edfe13d55554703e048121d2b51f332f3a783e51d42cedda9259e1350e

SHA512
bad4ad126a60eed326e22bf9648aaa9c0f6a31c8a0aa395ed0651e09560b73108288a5a26909546666423780e9a93dd9c0d86b02bdde72f64543e29ee7beed17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
75KB

MD5
d117a4fa50bcf0d06acbdac33ececeb4

SHA1
f982d30ea4415d0966696f64815fbd5f8231721d

SHA256
d866b1794fd2deaa11cada43faecbdee1aa40be8c7c4c3b93ed10b8f56156f05

SHA512
2cc14821d524a391badcd09cc495acfae8ba657e4b282c997eae179d1a2bbfa7526054a606e59f9c0f6a846e9e3c6ec66f4e1648c293ee1101171e8c3af39d04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
68KB

MD5
478d38d6480c6adaf8039fcba58e5b71

SHA1
85414ffc89c152d4ac24f936935031981d7030b2

SHA256
e78f7089bb60b454e2704d05be1b897278032d6a1abdd5a66a09aea5f7c0217e

SHA512
5f3a9e78da72921ce720f4b1caeeb688ada0ba95fed6effea26dcd95e05ca41d0c814ca53881bb5c911b3c3b086968da85ed3235916cdff0d90e66e72861f52c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
75KB

MD5
4d5202d8f51027b5deda756440338d94

SHA1
f7b0465d150b13b073d3ca54b815fa754b5e9467

SHA256
194262b11e7e6826dfb37c57364748064278448559f95038b8b2a615850701ea

SHA512
388f8ceef62db19d16bd784ac5fa8409fc11efd8fcbbfb31233b7098d89f68aee4a051636f891163be3cfbb05ab3c491e0a10a80b3acce42746124e8c6c22701

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
67KB

MD5
33b767dad040193551a24e0402538790

SHA1
d95435579b406f27df0eb7a9f596c0fb6b752854

SHA256
01c8bd0fa552b738619c5d4e100a2876ec234fa25fa6743f55e435f4019e31a2

SHA512
a15b6754a58f5673045fb5515592ebe18be8686929f81cae0bfddb69c96d9a561c3e9e4fe25ad812a042829f6531d5a888bf8b0c17b06fd2c752118f4cf7179e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
76KB

MD5
c5e38d64edf8e4296bb0b54bcf61c754

SHA1
8e32c81d80f29904748d15948791541edcf6fc7b

SHA256
5eacd970caf09611f3908eb9f6d7a6d120dbe0f68f6697cf9da1760643a5e3a6

SHA512
374f64d31d682f46ddd4e9a6d6bbf28e7addce5d493892c0338cab8871e814e85fdf322020fd5deaac12840c2eb85f71a43f85c45d0f02dd83d0b35b0ddc8fe2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
64KB

MD5
cb0b85931c75d242144e2ba4c48d4288

SHA1
51f80b319fb89b794d37287c9f320098621b8c68

SHA256
3b44251f763bf69382435a934bc9e16e38140a0765d836053407774d1e8be5e5

SHA512
4d6b7f67d50de9ad1bc6d8c3a64969effe250e233b05d635ac5f42a14ef1b5aae8799e9719bf364be0a8fba5025b5d121ecf5a65999d07b928d80e6f2235b430

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
65KB

MD5
36a471bb7efdb0533d29be42f6828790

SHA1
58a4c6e84ad05f7ab37f27c1700be7502c565031

SHA256
117cc1c846f5a200e9fa1d0347ae961065ad3b9f7a306db8231b0acd894831c6

SHA512
6e89914faed9df46cb8c0bac486377ad6388e15768dfd4555a60ce838d8ff8f78755a27b01167a5a75086bc5f969d8ee2069570936a9456177b7644a91fa5bbf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
75KB

MD5
61207f0eadfd43f73c4386afcfd02d18

SHA1
7a9a8f9cc96b6cdb6b50d65f9c99001a95a9fc92

SHA256
e4a094f05ca7806515022e51c1edce380da0dd1b619f85692b45a6a716965571

SHA512
8a094abb225b1658f781f9921aa64b11873469f2bb88611dabfecf1092c03c1441e45e1035f6b005b22bebfc9cf1a247b8827e3b8c44b1afc173078789dd90c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
33KB

MD5
0a2ed8f111be85af12614299f7e3a184

SHA1
6c57a4fd5f9d1ea9296ff656667617b088316421

SHA256
1fc85f0c48bc7a2cbab61140ad4bdabbbc38f9b83d9106eb9a833df12fb6ce1b

SHA512
30ffca5d57448f36a93eb39f5c5f1f9840080e8b642bdaf0b259a65f42f7847f2f04965c8261d221a794488b91b3fbd744cf612b8e21a40e2a9c806aec8ef0b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
20KB

MD5
18f9722fdcc2c1955b8c73ce08582803

SHA1
043cebf1675f9313c6f74cbb6be3768df9eb6b3c

SHA256
d23cf15bf702c78411dd7bf1046e2e23a64785250c3eb01e4f8afcca9697ab8f

SHA512
c9681a079d3aa55f04c0495dd2834fc8e1e55118da2055b17d5057a42001927e29793d9493b3e5b82c36549b2206740c4db48f029e90062453a8f1c950b1b9cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
b55fa2a996171d05cea73d188a2c5e4c

SHA1
50d06615561147c897922ef7eea03ea46d2ebe90

SHA256
dab206acc435da24e66a0c4df3138dc3dba1eb16cc4aba508e74164709398802

SHA512
285f1cf617c276e95edcda93817e94b0f5e851cee7f4180842f65e0d2f1e6b06f733f1aa7d9426b14c674f4ac9a8ac2210a44f46166c2b5f1d157cf67677f88e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
cc0781bf0cebdaeec542651233f9759d

SHA1
e12c0d634c3e1db8824c0a872807eadab4d8bb24

SHA256
39767ce3f47cb0629aebd2a5cf7a031eb6106be21cfaaf561c3066f1b2016db3

SHA512
8b923a74367ebf22a491bb170365e122f7bbd3cd4b436e5ae249576847620410f61369fc9d0ad176bde100828772e45f8f02d6ff3dcde40bafc878a99f97b0cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
3d60d9639a2cbf2d957bcadb051d6067

SHA1
da76386334e02d09b06adce6d22aa591a2c4fc6d

SHA256
c826402a33813a12065e8df14488fa2be2736143edaa94912c686c5d875703c7

SHA512
d218821fdacb498bd302ef4c1212146fbd3a905e2366a0867c08630618a1c8f265aeb98a4d260c6b19ced7505b253526751d7250b0e2e617c3aff6a98c2f8caa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
8395e42f2495212980f0d18e89ed4d00

SHA1
f0f19238f51ba29dd79ce8ec856896694e2efadc

SHA256
947ee474669588e4612f2e78be96216c5d5c52866b45584952e046213aaca8db

SHA512
92ca4acaca6134d9a2683efb1f8846a70f315f1d4e4e2fe6ca29475e1792424aa55681857f86aea604a955e7b652d6886a7ac208c297916db4f887abbde72c34

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
31f069427f09f971ed819c23413e379f

SHA1
09909e4e3afeb0ec6b87dbe809bd78376b807be3

SHA256
f6812a300ecf1598cfe09920489e1fb7d43d84a2e1381739ba8dbc88ae591aa7

SHA512
bd1f8ba7e126c0a23c1997c072120732f0683b1e5bca65e576552762c28a6e25c254e61d375c327608f01cc8cd8e635cb222a3dfa30e150f3fd94836723c63ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c4d20787e1c6464f97f59dc97755b050

SHA1
f70dea061f87325730b3d55b96d40beb99232f8c

SHA256
b05f4dc8ef92196b4147e8a0798c5e485d4c126f6495a03eb1da1e9f5ee0dc2e

SHA512
5e328e16816575c6e79030464a7be7b6ccb34ed9f3001546aef9b4dd51b39d1f917bbf0737a42f071ac5e226e685f5bb7af91e7e4e0fc7b0af749f65ebf2b984

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
71a59e7fc314d9055d2c17bbe527a998

SHA1
e5decbe76d9f0688752555f06368e9c660af0090

SHA256
4e44b359828e8e53515a7ba4f8e4ba9d782c3e81497c931156ddd2bf1f281ff1

SHA512
fa9ddc8605c94924ba2221fb82875bfe610f045692f651910468768f6cfa3607c31ab9fcdc1084c5cf28aba51c4c9ec81e594b182dcd6ea21d3b65d849214ffe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
972e0a4b431913ec61849150d2149725

SHA1
7afc4f80f4dee7dc1a1eba18663b4a82c8339b21

SHA256
87a836c21fb1107bf86ff57451f4a54e2c02a5f58d65aee3ffe56ab27c29e96f

SHA512
09c25718f5fdc50378517824b8c92dd65abba0a7a34cf2b8f6e6bc96d2579cd45bd8de5bdc156a76d5c2689997d975a551e6ed627c69993207936bede3a50dcd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
08b912da62e73e4699475a909db2e951

SHA1
328ba24f8cfcb6d02b7edd0fe7577de8c2008b44

SHA256
7920c8bdafc462ef27e85d10d3afedf6832e1267d205f3cc64ade5a215a07e4f

SHA512
e72266353ad904e7168a8c28b7f25622ee4ebc719ba5b652427dbaf151515041ed123a53564aff552fd9e66897f425852167abce405b8bf6665f676d2ef99f7f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
371B

MD5
dd01cad9705533d601f6978a353fffa2

SHA1
641ddc43156dfecac2052a8cab2eb06e1fce4bc8

SHA256
de5be46c2631e16247707b091aedd6966e320eeced601b236f72c2480e042fc9

SHA512
a139d26bc7d8c5e7bb00a431bd7a210f79d9caf15b44e9009e7e6450a05ff4356225c0bb963fbd3d83c11a895194dcf77ac7350b5de4d1d95c02fc7ff72d21cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
371B

MD5
01a667d447a10e504d9408cd94741d84

SHA1
641980ab9eed256887511598d7b98164b63045d9

SHA256
fac4927ef0adb8840b745af1bf59a3275026fa702e5032a0d9de830d6bb30847

SHA512
7faec0f985538a6af063eaf387e8c934119a496fb467c6697fec9b7e5e2860605859172103bb81d586c2ed374f92356fdc6b3e90549fca8220d17c42f0ba4983

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5896bd.TMP

Filesize
371B

MD5
303d9c19fd215e21a5df178f0f1a6089

SHA1
490e34f8df56fa3719c0a4c64743de54c330135f

SHA256
41a3916fd50588c74d66dbee43eaf23915e1368e1393e58bdd7f1c05e260b66a

SHA512
0fec4da33f3bd0a3e913371bce824d17aeb971ff79734a936e25f23cb03321a838282123046d532cce88804cb6c1e509dc48a327e62bfaf2a09b20a4f8547722

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
e81da8c48b668a9d0f67823cad8d25cc

SHA1
6a07e62dbe59c3699883dc414e526d904b899325

SHA256
8d87b389bb18daf8bd2edadbca604de0eef3ff4efb0e637b0cda2102c44a9c9d

SHA512
f8b471b58261caf734af1db432c657354743f8733136688dfff53d879f5e66e2035e765c39304fed48849ca3ddf12dfd4eda3ea1d690e24e02c6a7a9a93b97eb

Download Submit