7aca718bc617eae11f9a69f7ce78c21951d4832c75a4fd304176f8d5d20ba2d2

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 23:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

690de2230ce8f1cff92e8f3e5eb82000_JaffaCakes118.html
Size

79KB
MD5

690de2230ce8f1cff92e8f3e5eb82000
SHA1

27336189e4a948bc3f6b8e34b10b2bae85caba3b
SHA256

7aca718bc617eae11f9a69f7ce78c21951d4832c75a4fd304176f8d5d20ba2d2
SHA512

d73bc0b2d8bed4b5f8cfb58aa8ef00ba49c244e983f69ad74ea923eb6f8672d31236bf056d4b19940c5681458b9417c75bcdd5d85f099922998a7808d2de1e83
SSDEEP

1536:rQ+k8kuCppnjgcSKRmR73FWv788bF3LIS61aCXFAcQ7jMBfHk:rQ+k8kuCppAKRm7Wvg6LIS6AQFAcQ74q

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

Processes:

msedge.exemsedge.exeidentity_helper.exemsedge.exe

pid	process
1532	msedge.exe
1532	msedge.exe
4592	msedge.exe
4592	msedge.exe
2744	identity_helper.exe
2744	identity_helper.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

Processes:

msedge.exe

pid	process
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

Processes:

msedge.exe

pid	process
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 4592 wrote to memory of 380	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 380	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3716	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 1532	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 1532	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe
PID 4592 wrote to memory of 3516	4592	msedge.exe	msedge.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\690de2230ce8f1cff92e8f3e5eb82000_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4592

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff12ef46f8,0x7fff12ef4708,0x7fff12ef4718
2⤵
PID:380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
2⤵
PID:3716

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1532

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2836 /prefetch:8
2⤵
PID:3516

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
2⤵
PID:3492

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
2⤵
PID:4984

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4704 /prefetch:1
2⤵
PID:4360

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
2⤵
PID:4308

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1
2⤵
PID:2596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5488 /prefetch:1
2⤵
PID:1640

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
2⤵
PID:644

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6360 /prefetch:1
2⤵
PID:3092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1
2⤵
PID:3472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
2⤵
PID:2420

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7176 /prefetch:8
2⤵
PID:1340

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7176 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2744

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7028 /prefetch:1
2⤵
PID:4520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7020 /prefetch:1
2⤵
PID:4304

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7204 /prefetch:1
2⤵
PID:5244

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7184 /prefetch:1
2⤵
PID:5252

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,13766439827589595666,4730366534565998419,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4948 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2016

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4216

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3736

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
7ef0c9079369c2c06fe0c00d6d422694

SHA1
670f522cf008c78b6318e0111b5d5304c01143b8

SHA256
f54b3fb95ec332490a48b29d2d34fd5643d8bff072ee78f43a5e14c00d047a7f

SHA512
b2e9cf8474aedd95bebdee5292a90b3fb1ca099e00eb4a85bd2ee452c9d97dfe41443b418497d410ea632f866d30b356b1950a4f6ebe2871cce5cda0aef8ae76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
607a30414a07f470c445ac3442615fc8

SHA1
b69781838b0d2645b9d31443dac744032beefbb5

SHA256
a770f562263760ccfbcb8f1496b306f461802b61aebd9d4add51f115e3296954

SHA512
953bd66448aceb52d3f2bd81e9c911af19e542d4e504f39ebb72e563fad0e1e3de24cf11fd880f746061cc7403afee9d392d3fcfa74bb953521f8d8bc63a3e1e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
63a057f9a3dde6433fac9cc212b47978

SHA1
9942d730f1a7b37a7e37bcb49ee0575b0cd49731

SHA256
b26dfd99e62b5cd887bd0d9f2b970aeb0ceb1233d94f0e21d21beb550324d6a4

SHA512
d15909ed4bfeecfe91a7b1520abb78b9ccd9d032295bef576360e62c12b82bf5e6598ca77b155783486388b89069b67314b4148b6ad858cd530e02e4fc462b31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
97e9ff57e3417a285ca0d705f08bcd19

SHA1
f04b304a83b113db3784824748e8c32eb9ff9aae

SHA256
6d4d57fa358bdb6f6bb3881ad592c8cdef2c46d7791fa998a71af42ce0c6e570

SHA512
6de2faca3e52b56f0e32ccc68f0f2134c8e323c9902d2d532f7045253ca07ef6f656a48ac67b86f7edf28f1069049f0f26dd780a442d3d921c75b60aba78fd2d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8eee4f498122a05cde0f9e799e4c8832

SHA1
859c3329220a6779b8b91be2e375472590cf6041

SHA256
7ca3d956cdf0d455df533d41ce17e336614a58ae55e030a1f2e8c385f16dc927

SHA512
f43279b1cfc338ed21494bf730ed151f1aa12d14526a4e965ddc1453b91291d2245eca1be8140c54628176fe9314a136f7d817eddfab106c4ae393c8ec3ea1fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
37e29de256eefee8f69f67c752816eb9

SHA1
69a4ca16e3cf5e6fe448b1576ac8834269b9e112

SHA256
11d049c9465c0979f1d85083214d4b153613e875a413cfe96c82ddfd468e769b

SHA512
cf4394040ed6611cdd081d767bfb5edc08ff8890b32a8de5bd33aa4384fa8093d916319323f144a9a9b4a963d2c781b6aa33af17076d97b3333c3230f9b55e31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fdd744607ac5aeb6d30ca72123d552fa

SHA1
758b8afbf6b15b24c021dbc8e40a373a24254fae

SHA256
cb45737af759d7f1a691dfa6239195d7f89a0c53796eacea0640ba8b211fc9e1

SHA512
2304d5d875b3f5be6a0d557ff1e248911665f8884b73cfc08b31f02edb7f9319f681dc333ff8dc36ebc3c5433b33270d45f09a6d0f0cd1f6ad99caed0f851928

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b84816b894f959463235d4feeb24213f

SHA1
ddc8e78834fe911f48b5b2819f6440e50060c07c

SHA256
c6b4a9840693db361867441c56ab4ed8dd006578efb9513abe0fdfd82271479a

SHA512
5b90bf221acc992772b93f4659bfe35e4a5d26fa3c7761c646ea541b1065e72c56ae491bdf64173a2a937bf3a5b04247dab33193ba97f10fac67dd3d22871c65

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
5932276dec31fa845d04824eea55efaa

SHA1
e45dba79f1161002ae4a72b8c69e7613d7fcf45f

SHA256
7b510a1525b98573b594478708edd2140cbddfea0a7a30be22c875a6ae97f8e1

SHA512
40c6a77d56032491701b593c58657985d150890e97269c1338770d7a6fd49a7c71a9f52b1d1c11f235400b8ad201a2262a2d35b65e19b5243336e8306e28dbca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57c4b7.TMP

Filesize
203B

MD5
400a0b8afe6841f34fcb257e16d0bfe2

SHA1
5bc5c131bd9fe2be0a36a65a5161682cf57bc3e3

SHA256
be87ee68bba95c159ce343bf89ed8b8c7bc44485ab12362e4c0744d3d05bfc11

SHA512
99d08daf34bd74cb3110bf4eeae7d822c4e73b56b76f88797608c40820810909e5cf872d7ad7e1331c0f19f332db7b61679fe8d1c04d801f353988696a9f637d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
aa996a9aab0b40b057cf5972ecfa2539

SHA1
6deaa92f44ed63b12002bd684f1aa54d7b2e8052

SHA256
ff5a9465a1573ca608380ac8a3c19eaebe918a9742e7d927d8bf9f360a906f37

SHA512
cfcf96e3d55aab2e7bb43467b6db6af651d8551bbd2f41fa0a4078d027955a2010074859f4b5d0d6ddfa974457d86be833df6aeca09baf8ae2f8ffbc91ca16ed

Download Submit
\??\pipe\LOCAL\crashpad_4592_IBMRXYLNZCWLGVYW

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit