40357b880d8aab75b97d99e9f8e3daae02ae80598e84d63f15866de6b9a0f150

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
18-12-2024 11:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fb6bd370a2ddffee7b3a9b78fc34963e_JaffaCakes118.html
Size

71KB
MD5

fb6bd370a2ddffee7b3a9b78fc34963e
SHA1

f34d85ff24ff2cba85e8f058f58768e380d8833f
SHA256

40357b880d8aab75b97d99e9f8e3daae02ae80598e84d63f15866de6b9a0f150
SHA512

9a7f38286e0fd281364bc2f5d01310c09fd9f2731facfb71070565bf679a130d01d7b3de57105bc011d592fc122e5380018f85720993388b4c8e1fae7aab7a46
SSDEEP

1536:lXwgr8VSeO3faAIn2nYFc5dwaS6cgRrZFR4Kp82z:JeO3faAI2Cc5d5rFR4Kp82z

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3996	msedge.exe
3996	msedge.exe
4060	msedge.exe
4060	msedge.exe
1368	identity_helper.exe
1368	identity_helper.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4060 wrote to memory of 4648	4060	msedge.exe	83
PID 4060 wrote to memory of 4648	4060	msedge.exe	83
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 4268	4060	msedge.exe	84
PID 4060 wrote to memory of 3996	4060	msedge.exe	85
PID 4060 wrote to memory of 3996	4060	msedge.exe	85
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86
PID 4060 wrote to memory of 3100	4060	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\fb6bd370a2ddffee7b3a9b78fc34963e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd1b3f46f8,0x7ffd1b3f4708,0x7ffd1b3f4718
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2520 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4912 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4104 /prefetch:1
  2⤵
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3820 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3024 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4840 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1392,1786828509498943837,9822396917008009187,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5208 /prefetch:1
  2⤵
  PID:2556

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3232

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3860

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7cb450b1315c63b1d5d89d98ba22da5

SHA1
694005cd9e1a4c54e0b83d0598a8a0c089df1556

SHA256
38355fd694faf1223518e40bac1996bdceaf44191214b0a23c4334d5fb07d031

SHA512
df04d4f4b77bae447a940b28aeac345b21b299d8d26e28ecbb3c1c9e9a0e07c551e412d545c7dbb147a92c12bad7ae49ac35af021c34b88e2c6c5f7a0b65f6a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
37f660dd4b6ddf23bc37f5c823d1c33a

SHA1
1c35538aa307a3e09d15519df6ace99674ae428b

SHA256
4e2510a1d5a50a94fe4ce0f74932ab780758a8cbdc6d176a9ce8ab92309f26f8

SHA512
807b8b8dc9109b6f78fc63655450bf12b9a006ff63e8f29ade8899d45fdf4a6c068c5c46a3efbc4232b9e1e35d6494f00ded5cdb3e235c8a25023bfbd823992d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3d3276de-556f-43c4-9300-c1ed7d4d7f0f.tmp

Filesize
1KB

MD5
5deae82207ec72b3339d5f5eb05998e9

SHA1
b733c74a6050cd0709bf8aea814a1c96dc6ed1ff

SHA256
a94b485f1b4fb497224e72879408434f31c5fb436386d4e3ad625042835c6dfd

SHA512
bb6912b46fa7be1d1e8b87771daa665e45bc5895ac21e5dd3fdc6f410c15c043a0ca521ad46d2194b0fae0fd0b750fcf5129501a851eff76fa0d49018a640a6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
71KB

MD5
da52e38c98b0f2047abeb07609608ab5

SHA1
da1210caff36df73e49a0c271ff7d573c2d20d02

SHA256
726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

SHA512
35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
61KB

MD5
468446a7240461af44b59ebb2047c231

SHA1
47b7c525dc91bece99df0c414960b9490b986ba8

SHA256
ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

SHA512
ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
23KB

MD5
7e98564be3c2fbfe5d55ebceef08fb8b

SHA1
4b35415b61c5ed813f615475df2d513f5dc73d5f

SHA256
b9a21d15fe5b99b73ccfd9f8df4213debb40456341e1e71d0848b3602cad2ad8

SHA512
4878d6d53441aab8c306b67a0e4051fe9fa0aa5377d6ff806c6e86fffb042c41a82efd7135754d9af1d6fc571fd23e3da37e680eb4bf983ce08de72421b0259e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
52KB

MD5
f9ad6fffe23fad04422671cf2fa4a661

SHA1
b8366163961f1689411636988a73dbc16d13ff3c

SHA256
f0ca592df98944df58f4c281890809d30fd2117e471b8021ff138314efef5dab

SHA512
e9d95f4f0eeed04413a1d798161d1c20d876f5ea4440c13e9fa356a562e931f98d84b3f6a907d6541cf6bbbd7e84f0e106b48fe2f5fcce77d66f70e114834aa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
23KB

MD5
facee74c789253ce2d2a63c6d49aeb94

SHA1
79b895ffb82ba8363f8a67f8380cd6f32a5fb907

SHA256
804c9c6d6384db9e246de900d22b3f4d79a7265bf42ba72513d3a060302b3f10

SHA512
4a1078ed20af2a83f3a3f1893f4f1e6c5f94f8608ad85c50ae232aff6b8eb931167c082ce80dc51da4f116e4cff970571b2d51234f9777ead0d5b9a5de4fa8d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
76KB

MD5
2353dde54fc75226c61cf3ae7c34dbf7

SHA1
64c35e7da8f1bc3c0dc8b715cc455beddf280365

SHA256
718b334065a9554523522e36f459747aff66266045415a6a7b45b9b0339bcdbd

SHA512
bffd633b060043e92d1028b445d216ba1c35c45ca3fcd6afc252ed8528e099ab9b126dff412d293c3926c5f6ad4fef41c985a83b0448c2ac9f6507aed0348167

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
116KB

MD5
dfdd04d19b19e36909ddfb2a274c2baf

SHA1
ab8b139782531e53e53889391659b78723d0a4dd

SHA256
2e54a27fef29fd03997dfbf305ba27106ba00f9722c6076a2e9284946fc0366b

SHA512
f7521abcc764cef171df9291a8d7a81eba0d00281074231f599c9101f330e96e7ac0fcc4baa762940da83231af78488b85a29afbdc45f1bb4249e3db44cbd793

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
127KB

MD5
dc8d5f8dc9569824b30082599f5ad24c

SHA1
4bbfe1f52cbd55548c49383ca22fba856ab09dbc

SHA256
99a00ffd1c25e6b6c3e529a1892faeaca8b7cee0648ae452750ec4451f3043cb

SHA512
6bf5449ae63d6a4cfc76adaa556d216e71e9078ca564edc846137801710d5fdab6cfa3bfe53077f6d40e0f52c86ef841e21ef5b956e46c51b87a1fea90058261

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
7f1645b9d7e4cb963de4dec70e65976d

SHA1
9b6fad9d6af6daf591d3616b18fbb29edfee0e43

SHA256
90ec2d9af6d2bbcebad69c5f51e5bd50ff275eb79c354e851b7ead322ec4ae6a

SHA512
63ef6ae0b477ff33925b1a83481a6a1ec6dbda1f66012c82635e6192d18e49a0d30870090186992252dcc8c9a4b71c9da1f3b5614779bfda2a9960a91c855cfc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
642eee4cb2e24e064d489f9d804ce744

SHA1
1a82c8d71bb38630b9f93b7a1e6b7509399f26e5

SHA256
a5136be985ef7d209ff3046b01c088d8c081b05150156abfb5c2d561be49bc2d

SHA512
1e0e21984bd455befa7bfd5bf7dacaa4e0101fb8297c6ff91730097db9e9ad6b2075194949d3a1efddc9cf8db6696ae2e4b6c25b169419f9d8d413696995bcb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
14b443746f4c08ea98531d1f837e3412

SHA1
60ba7f34ac48ebc95d4162c533132a009125543f

SHA256
1488cf142ac3982d2814997f5a90831cb5ad4db3c8e9a00288cba300ccf621a7

SHA512
de8dcb611a672f5014560d658b389e908111f06404ea463cbd87621783f51d2509418d7b9518fd6a28ec92c611bb56bef6a1624a2ab6f277e3fdc5aed159619e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
84c73490687266d7b9f10a8f5751aa06

SHA1
61d1e22ec1591aac0212a66d60dbf96d49a55959

SHA256
5309fa2d46f80974ad81c9a5b242e7cf1e92ad0abade6f85c4e0c045ce11de8f

SHA512
a468343d8a58810048a554e4cbab8bb3825633454c2162e7e0b9d4fd6dd0e0c32cd3631b4233a632dfdb707c41b450fb09a14bcad934cfb182878e1a33f03e41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9fd08e27aeb5216091c28dc9e6fbdc27

SHA1
56f18cceb916d64d44f55b02bb8045cb08f53b43

SHA256
9a0c5224ec231baa3ab3bc2f5a10d0cc32c08503f6560abdbe1c554bf54d4b0b

SHA512
1c9a9a8fa1b702c4d8b01b6bd5d91185862023743e86644019303f391ffe50f3911fd7930beea48f620796c5d7400d0d0eb5bf22302de1b18f1d49678e88b1c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
936046254e7a702415b4829f9716541e

SHA1
9089cf7a3175be420e7cd5693570c3b4f5a941b9

SHA256
440bdd2872ebbe4a87dd3fab255136a59cd75ee5902c9846495188d7166c6d40

SHA512
e4122dd9e19f1b48c5fa1cff8601d8377f0562a97b2d522fcfc375845dcf9208a2f89d8e68757266ad760e4f2ac9311af881d69361959a0fb9460fde6969dbb6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
995161e917a913ca601b519891c5bad9

SHA1
ea6c98cb44adaae6132cf05247c4780532399529

SHA256
def6733356321ad1b1598dc6829561dd03be72243e92a62d3fbdc26ce32c2633

SHA512
7e8522a270d89156f06b69f478a2723b4e2bc141ee7d1850712204d712d342a02dcd156fd16d8eb53df90ab3e3d1416410b7024c2fd84cf880d2d17a6c9fde48

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
da05e8fa41c72738b8aa34eb880d77b7

SHA1
29ac0b74196d17a57dfd5b17793b382d9f9bd7ee

SHA256
9817a96c9c13da3a99f397be1d6a01fc6a7ae9474700fc7aee7c641fd2068309

SHA512
e1982204bcaa9cabd0fc00d82c5b5e07f001a39fc02e9ad5628044b410467566ae90d3ae3cb5a0531d42802f8457daf9a878f4e28c24dd4a878baf69ac14c60e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
71be9f76cd4f512e2ab8585af01dc8d7

SHA1
27decd917450e10b0374a57275d426af1db3979f

SHA256
03b5f4d0d7948be273dc4c1f0a8d0f2a075b86c52ff19bed803b955af42c3e2c

SHA512
870bc2e19214927db63100921f0cc15c0f3f5708dcf9cc3d837b2c2c7b202d4f5b2c48989db4f999154ddfd5350782b99b2edd1acd232baf0c042e33fbd4aacd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
adbfced40233ababd4127ac3ed665963

SHA1
e2fdfb1768dcc053332eee81d3f2fafc508d5109

SHA256
537ec2d9ecacdd95f6ae9af93941c02cbab275e3f1c247545ba3747b8615ed8a

SHA512
5ef682c8132b6cf29e49cdea0dc22512f24dbd8efdc79d8705f81bf9d5fab30f9391d8ba10e1740dc4eb46c98b5bd7ee9fe009bea2e1a524ac3efe35b1fb5bba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
18172d118aa7f0ea4b74c5878015f2f0

SHA1
0c418e34a1bdc8ec4f938737b9f5f03074be1ae2

SHA256
c6cbdbab12b9b03afd33f213481dcb0bca4f6f65314495ddec9fc594503998b1

SHA512
feb626da962ced1e4ba0b8bc77bb24e1325ab7ec1c1ce5b1af182f478f43fe15693d42fe9d1e582240566e76c1de99a24d7b131475099db496c191134a2ddd74

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
d4abf01cb0f682f4eb9a23930a8e7ed1

SHA1
6ee06a46569d3f380b814a96cd7aac769b3b0c67

SHA256
e860015750100c7b286045576b09c79f111ea92afcf72afe5e2160d4a74a5f38

SHA512
acb8a6a7bc4524eb5635a1643c1c551f0fc234a8f03c7e4c7d4d2b757b2f9307acde1d88f6ee85dde4ced3f67965d69a4c80ad1ebde39f9a84124413ad22ab74

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
6393183cb19aff8ddaf960efe9c75f51

SHA1
2992023bdc6925a55ba309a3d5dc239ecbc2a1c4

SHA256
fcd4c2f94dbd9fea6fad618c66763b5c95a408619dd845186539f3e03dde2489

SHA512
c5dae5993301fbe3f2ec98fd91f3da57aae2b7e489a88f0f414eb5ec40684033ea453ba74e864c9b7994817db053cf2ebd48ecbb8fa3971945ca7823a4f54d66

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58ca60.TMP

Filesize
203B

MD5
57bde88ae56cbd74ab958a9dbec02e78

SHA1
e25cc6d0d2f1bf79be5c4442da9f29ba7b38efe8

SHA256
5881c6d591a1f41ec1e14d47fb6b160dc9287f12ae442a6fb61832149cd8b4e9

SHA512
7aa6e83468407a8690c221919715621e23c30ce8ea67e58884f6c9b1f491127cd44f427a37bb698ff08a453f3247a79e84ad97e370d90180198ec4a4473c8b3c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
1b7fd20d026816f63c3bad4ddd1131ad

SHA1
aa9be1ee3528873bd1423fd2b0c860cd66de9da1

SHA256
675acfcd8de84b3c6bbeb3797d5b48d2c1280d81fd5365925f22188db20f63a8

SHA512
b665cf5ea47c28213c38823c3ddc243fd7b6856ba2afeb07c71bb4f07bf7629f8209f076d7cf1f9e9d783bfe19a935c286d8fc839d390969caed9d9ff3a2ba7e

Download Submit