e60bb04288a8f576aa9691fccd8cdc27cfd2fec70cf3d1caa617200c08c67032

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09-12-2024 14:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

da049fb569020f3f1b63e49ef624dc43_JaffaCakes118.html
Size

85KB
MD5

da049fb569020f3f1b63e49ef624dc43
SHA1

191c6ae1330447f574737ca08f7bab8533194dcd
SHA256

e60bb04288a8f576aa9691fccd8cdc27cfd2fec70cf3d1caa617200c08c67032
SHA512

613e378d1f0ea985fd412fd2d4b56d326bd934f15c718ef5c8825431a663dedc53d7446a42193b7f78d9081dd1feca2e7cad705eaedc180e2a7da2f22e1be603
SSDEEP

1536:8wgr8VSeO3tKKzCZGA0cmWadY+diF9dsFlqaS6cgRr8z9Whf:aeO3tRzCZGA0cmW/Slf6z92f

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4292	msedge.exe
4292	msedge.exe
2248	msedge.exe
2248	msedge.exe
2212	identity_helper.exe
2212	identity_helper.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 1000	2248	msedge.exe	83
PID 2248 wrote to memory of 1000	2248	msedge.exe	83
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 2120	2248	msedge.exe	84
PID 2248 wrote to memory of 4292	2248	msedge.exe	85
PID 2248 wrote to memory of 4292	2248	msedge.exe	85
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86
PID 2248 wrote to memory of 264	2248	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\da049fb569020f3f1b63e49ef624dc43_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa90c646f8,0x7ffa90c64708,0x7ffa90c64718
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2640 /prefetch:8
  2⤵
  PID:264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4864 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6284 /prefetch:8
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6284 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6360 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1148 /prefetch:1
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1012 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,4324325816866636027,13445367380406193796,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5672 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4436

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1196

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3428

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
85ba073d7015b6ce7da19235a275f6da

SHA1
a23c8c2125e45a0788bac14423ae1f3eab92cf00

SHA256
5ad04b8c19bf43b550ad725202f79086168ecccabe791100fba203d9aa27e617

SHA512
eb4fd72d7030ea1a25af2b59769b671a5760735fb95d18145f036a8d9e6f42c903b34a7e606046c740c644fab0bb9f5b7335c1869b098f121579e71f10f5a9c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7de1bbdc1f9cf1a58ae1de4951ce8cb9

SHA1
010da169e15457c25bd80ef02d76a940c1210301

SHA256
6e390bbc0d03a652516705775e8e9a7b7936312a8a5bea407f9d7d9fa99d957e

SHA512
e4a33f2128883e71ab41e803e8b55d0ac17cbc51be3bde42bed157df24f10f34ad264f74ef3254dbe30d253aca03158fde21518c2b78aaa05dae8308b1c5f30c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8658daec-acbc-4644-aa04-370fb56a9dc0.tmp

Filesize
1KB

MD5
401c34035e28d5d933487229f15edc02

SHA1
8f94d99f5f4aa7cd76977a9b7db2006de115195e

SHA256
5dbdd88023ec5753135c88f3405de98e1f63a5a57c6d819a054af9f508a2bfbc

SHA512
4c06a2106342d7cedd3150545fdbde065292d4e2ac00108a1ae9a5057aa44f6dd28bfb9ba02cafd200491d05412aa1d673c6dc4ef9527adf7a4c2f3cbbbeb86a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
71KB

MD5
da52e38c98b0f2047abeb07609608ab5

SHA1
da1210caff36df73e49a0c271ff7d573c2d20d02

SHA256
726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

SHA512
35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
61KB

MD5
468446a7240461af44b59ebb2047c231

SHA1
47b7c525dc91bece99df0c414960b9490b986ba8

SHA256
ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

SHA512
ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
23KB

MD5
1ff53dae34c4555156d935d6455b5e8e

SHA1
7b0d480ae156810635d33de2750d7de405c41c62

SHA256
b60890e621ee1f1885e164572c092e6dfcaca3d7c7e2b6cbf65b5acbfeb6a998

SHA512
103de10e245e4eeddd8611d30f62a74b16b364b5aa90c866c1d239649363e42cce013d83520b7e3fe2c17ca709421168f78736477e124dfa841dc021f512bd1f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
20KB

MD5
4b3121a05808b99aa6e0cc12924f77db

SHA1
ee5805bb76c384d1e1667aea2976bd2f4f94c7cc

SHA256
e4fea32bac89d9ad34b13a25b0b4da1321920b2c6be2cabb75ff91bf6109152c

SHA512
9b83d55691b41d2a45a542d163c1b6a47208969720ec1fd15233f29ddcef2243e79895cfcb008767f91b3d1cf3a6288248e8b1ec50027eb96db04cde56cb2605

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
d787be26a58864f2fcccb21b21542f49

SHA1
26728db9975218cc77654fd2d7af364433b00b66

SHA256
9700b3a32db3185573563ca920633611d3263dc97a68c08c43d83eecd752929e

SHA512
ce9c50f1734b6e48ec4d8701adea5cb4c557bb2e27a52f13331fcc38b7b47c473352a7f97bd8af5e2c1910776d90fdf4ef36de303e8ff9ef5d9f825bd1c77dcd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
91e8cf8caa565eb409e8c9fda55dc0cf

SHA1
2925cc0606657c0ec498a1c31e62e05e224a87f3

SHA256
504fd5e34c4ba98878d6343fae4e121d8b86ca1b0717e9e2d5cb9783b536a53a

SHA512
044c1fd420c848cfe3ede083a208edf8f6e725010ad7a3f91c16099fcec63b61112701e541fb93c7425aed0b690d1ee9a8a35cd9c96f31415e073d500c2df993

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c94f2f145f86c57a18d0946c474773f9

SHA1
ef5479f2c24d498b0c0f9f076e4f7a31f5ae1227

SHA256
677148e4ad789100d063d791c4c60adc508e6c1aedb21f3b68f758364006aa17

SHA512
c9d37e279b7b5ba4d957f88162fdd2952b2e68dab18723a2eae207dd28163c06c2d9ed0277c3856264de8433913b4303049818b0a6044c94b3f91992957d78d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
36c01ac3392ce9cdde07dbc12f255b9c

SHA1
5a43fdb411136fa9c5c3c43b4d3d4c9ba110ff7c

SHA256
045b4aa5c039948f456fd3b942f12d628fda4cfd5ac3e2ab011e40e6c6849bce

SHA512
a67c0d9c5eebdb59203f1e1bfde76bb5196d4c38b688bc618caa79ccf28f45bc37b4c7467e32e7385e00f3d96e3b10b7e7a13fcea74fd4f97fd1eeb3bb9c0921

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6139b2be87bc31f9495afba2b78ac178

SHA1
5ee0bdd41ae946b2b77d92bd2dff86a9b8d4ad84

SHA256
7c61f4e6703cf9d3bb49347aeecfb5be2178dcd673901c9c9ac01482369c9726

SHA512
2827b5c254347f04bf7d1595f3f82625318e4f566caeffe0ace762c814139ac07394034cf4894f015b466d2daa3c8fe99551ca5580609cb14e486505a5757731

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
cef3efc0066ba9a172e1b9fd7f4984df

SHA1
2d1c587cac7ed27d1cd20cb302bb5c33f168a79a

SHA256
a0204ee76c189633aa54e7cf4b97e6bd35699ec228ff6c6bccc89edb7760dea0

SHA512
767e5f841f95d6950fd7dae9aeca2d57f6c5172ff944acc911db016d8d8596fffe41f82180275942a955c3e5e81df1adb881bb65536e29c131140f444375a272

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
370B

MD5
5453de3bc363d8456406952dd17d0742

SHA1
4e55ffe72cf9f54721ba88127d99de7fc79fe06d

SHA256
bafcda6a340749d2521c56fd861350bf0fb4149b419a9259e188e2c8b199c004

SHA512
f9a401b6cdf837c99d734470db7c8b5036bc5fe2810a4aafcbb59ce8a28215a302ca5efceead3d018566d69cbb16f040a9af853f9d73a2b7df0930431f0f88ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe593a8e.TMP

Filesize
370B

MD5
2926bcd5365ecd1e6092e9ebb7dc8407

SHA1
8c97eb45f99346b238cb88b4c04cbce2c2130d3c

SHA256
bae4c9074ccece8f70d0d267162b5bf41d24d1b21c79b05e6b660ccd71678674

SHA512
6c2d463c6f20edc3d4d5a87f26fa0a83136a18c18253a8b51fbf0662e54b0b9b228e7de28e1c4dd8198b04af7dd27389859cd73ab817bd757ab0f34b32ef1afd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
5bd8d5b9327d11af4a57de59b34fca4e

SHA1
ab732684142bfe90a9c6980c60031ff756faa095

SHA256
055dce11fcb71211de508b329bd51fc9b0ddc7b4a5b4f8b6bbb0d5072479f20e

SHA512
dc9fec4192b3fc4e76fd1da17fe1a3097178594e31ebf3a25bf019ef6b1e508daf3ac22589c19ccab40763566fdb718509c1ed91568b3d8cb9a27e7401888cef

Download Submit