64f5dc09af98a76724c12f7ba69ec901525b137ea5145e213fcc0c8a5e8b9aa5

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13-10-2024 17:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4135c3499046c6eab2eb1447fa037512_JaffaCakes118.html
Size

214KB
MD5

4135c3499046c6eab2eb1447fa037512
SHA1

e447ccbc904eb393faf5ba1c8f7c36b1d638d7b7
SHA256

64f5dc09af98a76724c12f7ba69ec901525b137ea5145e213fcc0c8a5e8b9aa5
SHA512

c9151a21c67fa9e27225793db0fe893e490e385c8bf36e4dea4537002ffba43b0c396928e0afd6196571023eb09df5c454927d0ebe17da4e735dae28922df6d9
SSDEEP

3072:pL3kDl5LjA+DbCu8codghZJjzq32D01lln34WAb2kodghmqeU3SUR4MAdmpzm853:d3kfh3DQ5qyO

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4372	msedge.exe
4372	msedge.exe
2632	msedge.exe
2632	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe
2632	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2632 wrote to memory of 4124	2632	msedge.exe	83
PID 2632 wrote to memory of 4124	2632	msedge.exe	83
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 736	2632	msedge.exe	84
PID 2632 wrote to memory of 4372	2632	msedge.exe	85
PID 2632 wrote to memory of 4372	2632	msedge.exe	85
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86
PID 2632 wrote to memory of 3548	2632	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\4135c3499046c6eab2eb1447fa037512_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe4e6546f8,0x7ffe4e654708,0x7ffe4e654718
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2708 /prefetch:8
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2064 /prefetch:1
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4624 /prefetch:1
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6568 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6696 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6920 /prefetch:1
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8152 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,17946725655577502666,6403813269449980514,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=8292 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4540

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2440

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:344

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e55832d7cd7e868a2c087c4c73678018

SHA1
ed7a2f6d6437e907218ffba9128802eaf414a0eb

SHA256
a4d7777b980ec53de3a70aca8fb25b77e9b53187e7d2f0fa1a729ee9a35da574

SHA512
897fdebf1a9269a1bf1e3a791f6ee9ab7c24c9d75eeff65ac9599764e1c8585784e1837ba5321d90af0b004af121b2206081a6fb1b1ad571a0051ee33d3f5c5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c2d9eeb3fdd75834f0ac3f9767de8d6f

SHA1
4d16a7e82190f8490a00008bd53d85fb92e379b0

SHA256
1e5efb5f1d78a4cc269cb116307e9d767fc5ad8a18e6cf95c81c61d7b1da5c66

SHA512
d92f995f9e096ecc0a7b8b4aca336aeef0e7b919fe7fe008169f0b87da84d018971ba5728141557d42a0fc562a25191bd85e0d7354c401b09e8b62cdc44b6dcd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
600B

MD5
c0dbe5c9ae131cb9f36ba101ee1f72d9

SHA1
a2b69340f6523a8326df728dffce42b9d6a3ce1f

SHA256
de95e0f80403add0b0159dd11d0733cbaae711cc2b473a8078857ec9985b39e3

SHA512
d2e5636edeaf787f1e84c8ad1253f90e09acc7dc9f784995979298528266be39b0d84cde42931714ce8a2224486bba0f7a6acfdd5f1a13ba438ea16c89cf90f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
672B

MD5
e1d7ac793d19975ffcfc43eabbe2ef75

SHA1
5210f5c72ef474fe4e3a03133aa737f582c6e4ef

SHA256
c9239ee1a5f586a438dd1d832add58cfc0b86f1e06b88acf94d9f58a95eb66ab

SHA512
70a88507fd60976a94788a6d05980b2ad202697ba5dfe39df12569f6600188bd9ea46fe5f9a8024639d146757e02e138dc713cdc104dae48f124b6107977f150

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
8d4dcbc3cc01b9fc912985ddde9db077

SHA1
9cd187722fd4ce6cd679e7f88a86417d8cc6f52d

SHA256
51948df9b5935dcd5015996dbd0d1b5011a9c5122119d38bea47e8a18b4b2af6

SHA512
4cbfd47b29c4a7fb5915100d11ef057c84b3ed0b16495b4daf3715ffc8b92eb523ed01e5f3a5d4e4806c0f30ba59c7724aad9520dc6112bf48ad41c591e99256

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
806fbae594649d2a520d23d895cbbd9b

SHA1
bc2a3b5683c95adb3584f9109037a99bac14d552

SHA256
464e423f78068c2874b9494dfcc0ef48e17c412874faffac4f5f8117a78d83f5

SHA512
fda5cc3b51c2824fc6e4bb8bed0e452189b135f9a2164328692b2f13a79423ac561b4e662d5436df1ab8469ac4b58f2feaf0da395ff7dc1171bce1e0fc97d86a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fd0cd6f20fa2a0b33fc0a54ed786d9f2

SHA1
252856f6e85b62b1fd2ee8f327a61e1ff3f141a5

SHA256
93f12e1325cc77ca1a414239e9351eb9fb82000258de04211fa7e97d53b1d549

SHA512
d0a6835614633a01479dbf8f341fe02a73a09846c7d6eccddf64c0929f25bb831028f60fc80951712f5819430669ea63a9c91cb37f3fa49dcf4eb637cacf56a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
9498604f7da6a007656657f0b6e4ea9f

SHA1
f1c2c6ff330bd43d23ee80fffe9cc3306a65ff68

SHA256
322ce9c4590255cc45529a12c997e370c396953070801b5c42fec6b8999e81c7

SHA512
ba124a5ad8d6f69083221f3874d75c3d6a5b6979927083082aa2fe02d827b8097bb576d3ef8345405f7285370b9a450038e94be133acfc10362b6fbd1fb37361

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\957c98bda99ead403e965ebb553e712b25665454\3a3ced64-faad-4e01-b224-cbb0bc4904b7\index-dir\the-real-index

Filesize
1KB

MD5
7f16d9c113e284aa411b68a8590b8070

SHA1
948f24efbad75b6835ba791d932d67227ac737fb

SHA256
50a15893c1f793a02c3e460879fc4b5240378aed72ec21de60b921c691fe9571

SHA512
dab0156c51c6306378d95e2723cbd882ed4a9e824265d440631cc3df696194ab8cce056d2f99fa842bc6fffa6e891ba0026b094693535c25e9c32d095f7640dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\957c98bda99ead403e965ebb553e712b25665454\3a3ced64-faad-4e01-b224-cbb0bc4904b7\index-dir\the-real-index~RFe58ebc2.TMP

Filesize
48B

MD5
f6200c0b74bde884e45e249a2fa74f4e

SHA1
2d442efa157bff644a5deac88a4dd021e863ae90

SHA256
ed9cd136bc067f3784bb57c1e7305d9980713bfb7fc655fcf2b10120fd05223a

SHA512
b1548c34466c379946b333ca70343c6cb0fcc7bf34a17ce5b9f225d934e72bd7b2fe7e44f4a14146cf03e9d373c83bc1d7129fb5e2524b12ae8d399bd3b56c25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\957c98bda99ead403e965ebb553e712b25665454\index.txt

Filesize
86B

MD5
34e273c7e4a5ff339696493f21ea290b

SHA1
a1e00de89f8cfb787262a8fb9dc79524844c7c5d

SHA256
a6806e7d64e97fb7c9b10a41a0a1c5204b28e5ca76240c3c5c8c91ca147e731d

SHA512
a6e49f6d8c2bdf60cd1082339b2aa72e3411129cbf7e53990fc5a620ef987bab21bdd81387d314760ea727688a9a9be2ccf46858f68543d101e5a73d43ec63ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\957c98bda99ead403e965ebb553e712b25665454\index.txt

Filesize
85B

MD5
45d7339561721057ff3be1b2c2ae773f

SHA1
2651ec5feba37686064cccf83dfe7ad4919259ab

SHA256
6c7692638401133b1fa2639ea7f8c3f262c4e2438c9e0b743fc0692e84151ec9

SHA512
c2b333202334f52dcd20ab4e2a261aea873ba51779c7223f6387caa699d8c3df46d4fb521d1832fb50052b5a6dc07123564b48a801c7087d778e8dab95632204

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
ecdf13fffb7e0bcb142e5a67996508be

SHA1
f617d5d74bb885ad9692d9a2cb07ecfc89be886a

SHA256
186b10ae1fd65e8d0d9eff9efdb196d96892c4d574953ead0154fc996ab16b57

SHA512
3772e9de25fb61b0325a20ab1f2b08e19d413c2c75a497333e29db6848780c220a20a3b73620b3b7b30a24ca0db04877d6b4300fe84478cbb5585583c879d99a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ea3c.TMP

Filesize
48B

MD5
837ce9efc1885dfab2015d937ded57ed

SHA1
0d11f3917cc69a5bfa8f48d65bda1e9c5a153eae

SHA256
101af9406e465684f929ed1dd637c388770a6c1b964f1cd7fdfec2deabc1f086

SHA512
55e35d14131562c5c689838ba8a1726914a99e09b7a1bf7e743c1b336ba8b8383d79e84ce706268d8adb24e685e9a4d05d709337c15d6bc3f478b616210302f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2bce8c72a198ba050efe0e23603b6673

SHA1
e41f0272f9fddd7ad69e02df8f9168226199bf8e

SHA256
36168fefd346b360a80e53bc33ede19b7f32caa200a5ad6b429be9bcfbbf7476

SHA512
b80de0e380c0a1ebe02730c0cdf663cc95c4f26f46117f51b1e4ee81c7a6ee42ebb40ff24afe8bc89905051b2ff4d51a3194f710c85bea1b75d0e2c156dd6d09

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
679a595933b47fda0f90dd50b1d975ca

SHA1
0c931e856e91c2ccd14a4cae90ac08575f80efe8

SHA256
16113d708be8164fb4f34b9c479d5264ea4e6c9c428cfe7e1a003a42fd6c50d2

SHA512
978b332d73d03a8ffd0950d74e6ba2d1414f6ae2ba042e1d23c04368356cfe6f2019945b28881acf1b9ed56dc39addc04f7199c5162a5fa7e175c9bc53a053ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58c02e.TMP

Filesize
540B

MD5
77e2b2d2e523f8d1cfafcb0162ae6964

SHA1
2bda1daaafb8ced99dfc8203a86002f67ffed035

SHA256
cfc700ebff12c51c30ee8f70e5758d9d67aa0e3cd71ca8066e5994ae3dfa9d1c

SHA512
b80d80e859a08ccd9c65cdf1c42b9c92e370462e6e2a464d25e082e2751b7d5fcd991f05e7d5626298c34d48a4b82ff3c0d4388d5132009871ec9ebbac63b6a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a563e8ad-c6aa-452d-9e3a-dd03343c9dac.tmp

Filesize
6KB

MD5
f6235d6a29535ce0b14f7eafd0d793e6

SHA1
cfbfcee6eef407a046157ccc689625f45239494c

SHA256
709fc9d646e700537b0ff9d8ae88bf0c5c64f536df0de21e9c1255f375411cce

SHA512
89f5b00c19b029d35559707e7328a152078fafa51471172c249d68a9009533e22df9551f3d05e1ad2d4eb57354d0ca6d61740c5c8df3f856d43fc8bf212e35e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
69f2483f555d0724729d09971dfe798b

SHA1
5c0f095b1e822d2c8f4fb15acdd398c37a36f146

SHA256
3bee77c0c9e20c3711a853490d643e6c9c2f8f43d45fe22722a276f79cd77e8a

SHA512
bea8b70e9f4268c74ea73f68b9337064b52734ead9080f2e09b2ba8b335438b4bf3ed72da4cbe4d63657f7e57b85b3620fa3b76b75f367123dec82aabdadb8d0

Download Submit