d986d3dbb8ff3886c48847ea6c76812471df86868ede2993375103389d0f7123

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
16-10-2024 15:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4d7f860c2821a62347af7914f680d3e3_JaffaCakes118.html
Size

51KB
MD5

4d7f860c2821a62347af7914f680d3e3
SHA1

5c3e3d105068453e3d11e1002d8a39ecedb24ba2
SHA256

d986d3dbb8ff3886c48847ea6c76812471df86868ede2993375103389d0f7123
SHA512

1f31bf2e07ff8575a153b1ceac57a7f0f2fbd0faec875a8f64480490891607531ef83f554a52bb4b7df3e85a286ea9ee7882bf973885a14003db4ff40eac51f7
SSDEEP

768:K8wSMxnJVFBNvdop2IDT4BRRTuGZ7OwiVYGw+EakC/729my:QSMvBRZhXika4

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4344	msedge.exe
4344	msedge.exe
2052	msedge.exe
2052	msedge.exe
4136	identity_helper.exe
4136	identity_helper.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe
2052	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2052 wrote to memory of 3688	2052	msedge.exe	84
PID 2052 wrote to memory of 3688	2052	msedge.exe	84
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 912	2052	msedge.exe	85
PID 2052 wrote to memory of 4344	2052	msedge.exe	86
PID 2052 wrote to memory of 4344	2052	msedge.exe	86
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87
PID 2052 wrote to memory of 536	2052	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\4d7f860c2821a62347af7914f680d3e3_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8df6046f8,0x7ff8df604708,0x7ff8df604718
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6192 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6812 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6812 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3088 /prefetch:1
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1900 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6348 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,12388403466647238407,17941855250219572986,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4752 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4488

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3268

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3080

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
bffcefacce25cd03f3d5c9446ddb903d

SHA1
8923f84aa86db316d2f5c122fe3874bbe26f3bab

SHA256
23e7cbbf64c81122c3cb30a0933c10a320e254447771737a326ce37a0694d405

SHA512
761dae5315b35ec0b2fe68019881397f5d2eadba3963aba79a89f8953a0cd705012d7faf3a204a5f36008926b9f614980e333351596b06ce7058d744345ce2e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d22073dea53e79d9b824f27ac5e9813e

SHA1
6d8a7281241248431a1571e6ddc55798b01fa961

SHA256
86713962c3bb287964678b148ee08ea83fb83483dff8be91c8a6085ca560b2a6

SHA512
97152091ee24b6e713b8ec8123cb62511f8a7e8a6c6c3f2f6727d0a60497be28814613b476009b853575d4931e5df950e28a41afbf6707cb672206f1219c4413

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
50KB

MD5
5bb52fd3b207ce620bec178996dda02c

SHA1
41a0c05e8080d644f44ec34e7b55e7f164b1916f

SHA256
d2cabbde780ee183eab0b07c928db8ccb208c4daf3bdab672d9cc9b11849ab1b

SHA512
de4f1b8eee88461469dfd0aee90529a723e073f282577f2529b1f950bccf6d9316fa605b1653bf238234ad0c36573b392e56c3c57132fb88783c1fa72752cf51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
73KB

MD5
8d802b8bcb092fe62b710e7e50ee7172

SHA1
4f2d966aac6c8f1977838ae508627a983337644f

SHA256
97fae554057ab5487c59a8ea28af6d0da41df2d76c237895d60c5dd132fa5a08

SHA512
fbd1c41faf498b21999a53f0d3e77769458ca4c49726deeafd01ff895d3142e3a443a1e5200dadcb2f7727009b36c10a7d5a48d99b42e835c87031aa9890cb01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7ce119beda7e7811_0

Filesize
385B

MD5
5659769ed2bb1e283bb543c5f1a7b86f

SHA1
bfcd9c2e2440b30ad5cd5b5d4ba803ae37896a13

SHA256
3bb707ef8f85e7c6cef39a48d1ec623d2584f0db0eec09d4791e25e01cc8c1f2

SHA512
02d02ea3f7ad6dc3a0a82c61aad9b4c2d5068d8d01593b438236790bf702cf6c5ae6d66711b2ddd33b7f2b972d4c677b1b27076a8310162cfaaa9714a298224e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8578d161554ddaec_0

Filesize
32KB

MD5
86cc7a9add519c8a8ee28698729d2095

SHA1
fcd61a28e55ac5cc8c8bee036303849290069ec8

SHA256
07d31194eb24f649cc4933154423b6f2e677e13eed0a077f95875fccf1f9d6f5

SHA512
77041e6f4d0b068095778786b4ea309d61b0c56ad9b2044caa4af2b2f1ac978c1b66e46c0ce9345813d041677fa2391c0cb7f6ecb8dc8ce242fde0d2273f725e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b78dcf408e7fec18_0

Filesize
166KB

MD5
c6d12f47c806a1aff901f5f2c88d11f2

SHA1
f67fd91fb7e3bfff0280d222a07303ad20df4292

SHA256
913eff9c23ad46c2949a9478685f081bd40ac288bd7818e27cd06d48c79969c4

SHA512
9ac3f461dcb4360792d858e086e72c8a12fd039955de0535e73c5ce4af7ad3192e3a3a95a252651311b47101310ad009ff9fca8b1904727c6d3ffdff369ce60f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c10ed0e2d5348b9e_0

Filesize
144KB

MD5
ecff1f190782749329e9e53995bfa33c

SHA1
b0e39f9c58c38f2a85bbb5cee5e7b168a44101f2

SHA256
2a6f89e815204e7282802cbfed452dcb6a223f1e015bf49d15f62ec74f1969f9

SHA512
22a1ac6386b333911b2fe429becc827b30a971dc7730476b2417de2d3139c1995126a031e38aa1f134558179335a1d131cf595df9c05e5cf01f91b52d8ef348c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f632a6f739943e98_0

Filesize
278B

MD5
a4dca54ae120bc65e517187eb5a83c04

SHA1
2b97c20fa3e69d51e58cb0dada2d4128c8c436ae

SHA256
3f52769145539f779439b7b657082d59df0ccf0017bdc1c03a0bfec49932ac8e

SHA512
984c5c70a33781e7574ab47f19005b713948d7441baf66d107ff70e572299b3ac2e7fcbab5735bd943d5608b1ea02bff8591ffa07cfbf738279bd39912922f33

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
e97f06a2abff99b791fc1f503f0f8881

SHA1
ee6882fa93e28278bfd81864171630ebfc0c3c7c

SHA256
c25a5f71a1d1ada07d1fcedd421f76df38ab66b496f42ee40f066c13cd678080

SHA512
298365c06d90ba2b9e47bdbe3341492f94692481c737b27be881fd69c8f7e564d6bf9c474b6038049accaadd1690b0fa4e41f0f4ac73394cca4ad7c3bab6ad53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
2cd09690df99c39e76a0e3276a8c1e30

SHA1
a679b44a3a4dde0f04bbf487e9035c7c69b1ce8d

SHA256
44ae0f13cd8ff5c98f28c7185deeb0321b63941f9cc454a3cd6e7f7ea1971668

SHA512
1d2e2be2cf539064d45d503ff3d145356e51e9d37a369140054288830b91e34a414e5d8c445315d3c0af5801be485e31a3d936d191412fe024c925a0e92eb798

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
801a6516c0d258744ca0086decba715f

SHA1
9298780085004ed7cd1f3121a48a80b4be6bc6b5

SHA256
b753638687a57179191e64ce7c7272a1b0cdfdbd85fa3c93ee9a400ee2cd8f11

SHA512
fe4d9e278d33d2a7cc285e5421c80310e958db6e1735695575b44496ee2c3a99a526dcf090a2c2f1db4cfede85918b311343fdbc014a20734a6fbb6641374e2e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
d1a7c78de15915d31b71140f7307c2a0

SHA1
3c7c574f140d987db4d9d9f96badab9f85a21d70

SHA256
5ae23851c67d738f0c29199a7520aec1af1e015e40318053052c4f4c0bc71400

SHA512
283c0fc31e641b9a5c8c795a67da18739a16438e1d4282516ae208708955df7420298f361571bbbd7c645c16d6a6214a9e83a12ebdb871040a6d4c51f55ac1bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1c64043be4c5a75e716ae5ef6e936360

SHA1
cc553837767395f569df944d4d77086f2fe81dee

SHA256
207e9944ff6bfcb12e29154b3e2f05ad09cf71f1bd8cd42275f0f19129b3d7b3

SHA512
2561bf73b942607e76922344cb02d65ca643c202b516515ac66d79ed459416807b06aee7842f3f7b854e4ebdc3f91d9d95f6570912ce15626d61b63bf46be641

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
82905e35254c8890107ac8d20863fdaf

SHA1
808b5f7c2877f12dd682bf45bc957e2e64d82766

SHA256
8359e9bf44d1ea141977dcd8b4e9f0bf1671fdcdd1ddc4d2465c641f8577ce48

SHA512
3cb12d39d04184d65544f70aade8c0b710d1c717a7f7fb9181fde5db31d58eca40a6ed69a5a79590e139ef3db9808a79124b05a3e2019dad149b56a6f82fea17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
beaa3c7ff98880ebc25bfd29198985d3

SHA1
96d83ee3ded41e4d20b9b6f18db432899793e6d6

SHA256
4838b85058a9740803b5b0e6340e3d82e6b0a3116665bff8d91946d15b5c8ca4

SHA512
709d183117884db3c6b405c81529893c5e29aae9a7eaefdf3641dcaa61ff0c1de1c2bd8c0854b7c38db669201fe42608e7c9621872bfc9a81140b2a98938647c

Download Submit