942402a2c78f7edeb8f5b342877f73a96f6787b7b4d6ca83abf2e9887ff8453d

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 01:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

65832691777a817152c002fa21badee6_JaffaCakes118.html
Size

54KB
MD5

65832691777a817152c002fa21badee6
SHA1

ad6aaa943513266948f4bef84b1691fa07068210
SHA256

942402a2c78f7edeb8f5b342877f73a96f6787b7b4d6ca83abf2e9887ff8453d
SHA512

1e925d1160e496b4ce56cfc7113b609b8a115acf303558e5545d1d3430f4e883e1acf8487d30e5e881710e0f9771e762a78ee41591ccf849819fde8be8fca025
SSDEEP

768:dqT0EipBmIojsnOmRB3jDxqbUyfWaLeRt0trg8529Y5:0TupBmIDOmzTD8bVWant8Y

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

Processes:

msedge.exemsedge.exeidentity_helper.exemsedge.exe

pid	process
1964	msedge.exe
1964	msedge.exe
2336	msedge.exe
2336	msedge.exe
4740	identity_helper.exe
4740	identity_helper.exe
5368	msedge.exe
5368	msedge.exe
5368	msedge.exe
5368	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

Processes:

msedge.exe

pid	process
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

Processes:

msedge.exe

pid	process
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 2336 wrote to memory of 4388	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 4388	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 392	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 1964	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 1964	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe
PID 2336 wrote to memory of 2860	2336	msedge.exe	msedge.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\65832691777a817152c002fa21badee6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2336

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8c0ef46f8,0x7ff8c0ef4708,0x7ff8c0ef4718
2⤵
PID:4388

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2220 /prefetch:2
2⤵
PID:392

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1964

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2764 /prefetch:8
2⤵
PID:2860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
2⤵
PID:2284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
2⤵
PID:2868

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4652 /prefetch:1
2⤵
PID:3192

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1
2⤵
PID:4648

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
2⤵
PID:3748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
2⤵
PID:3524

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
2⤵
PID:4984

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6616 /prefetch:1
2⤵
PID:1532

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6636 /prefetch:1
2⤵
PID:3576

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7008 /prefetch:8
2⤵
PID:2268

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7008 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4740

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1364 /prefetch:1
2⤵
PID:1912

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6896 /prefetch:1
2⤵
PID:2024

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2184,15104938924014816842,2033385354967773493,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5228 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5368

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2132

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5052

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Filesize
330B

MD5
a386ab33e91f36d8de59d2b7bf18b4ea

SHA1
0b0a833c3dd9b5e602355b351b9c743e9f5fbb8f

SHA256
fac8461764682d527185268fa7da1803d552c637401535f93a517dcea28701ff

SHA512
b4d886b893d96dc76afa07b3f4836dd28906da5b353766ab334b2592ccf7c82542f5b64eec155ee5e70f689f3ce4ccf0a45dba0b5cfbe03608cc63b1ecca672f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8ae0589b-73f7-4835-a96a-7889c717d463.tmp

Filesize
5KB

MD5
156393890793038e497958f718973578

SHA1
a8b5c358ce374b542560eda9730fcfae24f8d72a

SHA256
2bba11e6d2c9a1127342ebfb67694c23ca67550ab35ad0eca1cbfa6b3a50ad52

SHA512
6a7cb07e7b497f39ba53aa0b1bdf2b2a14e8d0aadf75883ab8da985dfc5eda0aef45cddb33ebba99bea5ecb5e454887483857c8af9b77c2b6926a7c0969160c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
44KB

MD5
88477d32f888c2b8a3f3d98deb460b3d

SHA1
1fae9ac6c1082fc0426aebe4e683eea9b4ba898c

SHA256
1b1f0b5ef5f21d5742d84f331def7116323365c3dd4aec096a55763e310879d8

SHA512
e0c0588ff27a989cac47797e5a8044983d0b3c75c44416c5f977e0e93e9d3a9321b9283ea077e6dcad0619ac960ee45fe8570f1d5cc7d5d4117fee4f2f0c96b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
a94be27c4c01999ef7936110c7bbf465

SHA1
ba387a9c7b189d3552c837d3376ee5bba1d5dedd

SHA256
f1f8e38800c7498a6df739826195a55ed3ffbceb31ade416849aa8ea80e43620

SHA512
289f811e26bef127fcb08ce70526753e95c73b3e51b7d38f5f3176da41d382dbb5df32b33c577d39785dfdb1607b3fbcf15ccd4e2115955dde04d1ed27bf2d5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
3edd303b12eaae1bfb8c736fb76b1fa5

SHA1
735a58fdcba3856d8520a13e2931861cbc414f4e

SHA256
72f8ea958d191912aafe8ea2508b56e4adb2a426b813e76b13fe72a925f5a5c4

SHA512
cafee4c2bd26cee8a3f44056a34115b7c63f51e1400379484a77e42d30a824c60073c8d71e8b416db8705c9eae7fd2e555bacba047f9786a99632694133d0608

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
0784b6ada89b775f38f0d83afd0ac1f2

SHA1
b3ba894806dd0a9fdd33d9f59401eb2ac02467d2

SHA256
0413db24d1c77d138e13f6bc9cfbbf032eb6683183503cf39e03ded565a76f8f

SHA512
2ab408e689dc86a5608a86756427129bce59ccaa172d669b463ceafc90496684eef30f6acb45f4064b25568c06f3fa618abf6fe911fff3ef0782cf0fde009b1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
df89fb6b1cd80b39788d8c4e1f29080e

SHA1
03990a2cd058682d957d59012686e0c6729f01d4

SHA256
b0161b44986ed4095dbb6b6066e512a4c36439db2041709ca4763c9412d24a29

SHA512
5940968cd4a1d59cec7803c4e8e48c8d13d8fbe2a7875b98754cb0cb2ece2d9230d71d47edb0b92f7f0334c9b303c0dadfa9bda5d2072b25f53f1c7cd638496b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
7e2ad18c487be5fa6a408fa4e266a12c

SHA1
07b1720e771d2bd7b753b141560d34c813dbdb6d

SHA256
cb3b37588b55c92028c0d3c6c2db8512fc23cb15c2a1ddc45f96a8e230f7005c

SHA512
c7f4711d817b21c86497da7dbfc0675a97c9a9f036568b5699f4b4b299ce12bba9e6d9021ccd2d090cc426a7cbe98af2aaf4010392f33ba5ebd55c02326407e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
343f0e4a5b74665ae40b537ecdc6483c

SHA1
53aa5cabd71f26fce710732a4519dcf4a60e6c27

SHA256
1ca460372632c2d060fd4ee68c2f10e0a2f12843ebf24ef6879e3bd0e19f904a

SHA512
562023008a8ea886afb44cb0725bfbff443c73e65edc9454b68db31fa88ea2ebe5d9b51aa7a34fa03a30f159b9019815bf49782d6f9b0ff54365ea78341e005c

Download Submit
\??\pipe\LOCAL\crashpad_2336_JXEZEYMZHPYVYLVF

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit