a087c986455661ce5ff914b10b16b749ca3ecd3607d0bac0eb8d0c786127252e

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 02:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

65c0766170254a9c5da0e9a69dd614dd_JaffaCakes118.html
Size

104KB
MD5

65c0766170254a9c5da0e9a69dd614dd
SHA1

1c8a1a0b5d395faba3626e2688b3b7118b2b766a
SHA256

a087c986455661ce5ff914b10b16b749ca3ecd3607d0bac0eb8d0c786127252e
SHA512

c92cf5f0679d17eb8ebd6149c0c006141b2ce2445d14c8bc01638ad2be1d888b06ea6884fe24e7a0a930117a0ccc9b250949ba50070ea1650c09c28f516d0cb2
SSDEEP

3072:QjY2sYJ6rHfgaToXdYKlGjQEMmiHTsFteeyRc7A7N3TS:Q4oaTo4Cls

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

Processes:

msedge.exemsedge.exeidentity_helper.exemsedge.exe

pid	process
2580	msedge.exe
2580	msedge.exe
220	msedge.exe
220	msedge.exe
1536	identity_helper.exe
1536	identity_helper.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

Processes:

msedge.exe

pid	process
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

Processes:

msedge.exe

pid	process
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe
220	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 220 wrote to memory of 1956	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1956	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 3920	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 2580	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 2580	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe
PID 220 wrote to memory of 1864	220	msedge.exe	msedge.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\65c0766170254a9c5da0e9a69dd614dd_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8fe9b46f8,0x7ff8fe9b4708,0x7ff8fe9b4718
2⤵
PID:1956

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
2⤵
PID:3920

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2580

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2916 /prefetch:8
2⤵
PID:1864

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
2⤵
PID:1184

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
2⤵
PID:2732

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:1
2⤵
PID:3592

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
2⤵
PID:3684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2108 /prefetch:1
2⤵
PID:3224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2432 /prefetch:1
2⤵
PID:4028

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6360 /prefetch:8
2⤵
PID:1560

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6360 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6376 /prefetch:1
2⤵
PID:3548

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5960 /prefetch:1
2⤵
PID:2856

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6152 /prefetch:1
2⤵
PID:908

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6464 /prefetch:1
2⤵
PID:4792

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1792 /prefetch:1
2⤵
PID:5888

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1136 /prefetch:1
2⤵
PID:5604

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5560 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4432

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4824 /prefetch:1
2⤵
PID:3372

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15888285292616201447,2023897484832154987,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1
2⤵
PID:4724

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4100

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4936

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
71c39958a2d7a7d34c2844bceb6c27c3

SHA1
699e74f8af8f306fef2535f8204e8b04d4816739

SHA256
496e11df33c60d8cb5d96434aa2915e4a02e4778b07e059e458d5c56142d21a5

SHA512
2d699bd238879b1ea7e35505ef6c3bce474a6473fcef103c35815f09373f4b9c28c1ea7bf5c3333d0514cf458da5430a48eb549e9351b9be3c8ed7d3f0edeec5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
1d2f6296ac4c5acd8f42428112848049

SHA1
62676286bdd398eb9f9a10a9e213ea99b160861b

SHA256
c2748d05097c2fbdbad26408b8618987532d3bc789e191fa39d70f70dcba63ee

SHA512
82f2b15d006b1f95a49252430cddfdee94e7de5a4b54ab35b5f63a534d9d23179f36a2073e99eb78186c93bfd3b3dbfbc44b3ae0b799f34f6849951c52bab7d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
952f50d0481620ebd52bc29e7be6cb77

SHA1
76d0e3dbcc30ff10894d5c3ea9db96c7b43065dd

SHA256
9f57410fd99d3973e70a8470d29dc0da1cc28e69f929603024a19487380e2847

SHA512
da6cea4f8f1a925a5062fb84251610d5783c0d863e205c6172dac469f50a1a31cba3dc4096628d15c12475d7a89cfd2e3c5d84cf578174460eb4c4870164aef7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
91cd75c0fa415d9e02ee7bdd1ca11d88

SHA1
5a74f4c0db7b3dad0f4b5ed2978a685b76bdbf59

SHA256
89127b30ac2eea5718395324337b04a76509e137ae8be90b4deb08b94541c6fb

SHA512
521876fd25ad10bf947bfec54efd9e758669a0ed9797aacef229163d2ca29e993c95b3598e0600f3383cc0aa937b8cafaa465e6abed9b3888b64a4a883a42f3d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
32d7f6051eee7d7de5c699fbffe4f449

SHA1
ef61bcaf2b5c8a05852ce1090bd14bbd943d662c

SHA256
0d471c891229bb16388b2c1bd589fc0394d87fcae9c72d08d9faaca75063a5c9

SHA512
2fb8f1e2b41a3d05d1a2ee8f6562887f7922641cd965f7b9fa2edf450d0031db0967d989999b259c1764957b23d9473f37e50c1a5a8a5005a53fae1f458afd40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
fb87af19198046e737adf9a4220e30bf

SHA1
477df24b2d39f31da3b60dba73922c0e3cbe4fbb

SHA256
6439d777b945abde61eae328759509f2ff556f09b73535ed1dc6df50161d5fe7

SHA512
f2c528468e1e7dd85012f68a5201a41a090dd0958e08217c76e05451d1c466d0e187d299710b5bb80163de0625ad67387ecb5f7a6d88b755f7f6033309fcc504

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
3b1eb81258e937f38c2dbf55fc168801

SHA1
679cb80e5289fb006d62316585320fce0e1e504b

SHA256
960c0b9e66dfb78467a71a0a72037ff1b82991d4317e22ebc5c01489a7483ae3

SHA512
8c2631c1ef58383fc3328ae8c0c8b67a80cbc801c1f95c554943a8052221b0acc816fa16fabfa3f5d8e5df377a5901f80273431dc3e1f033cb9ceafce92cc711

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
bb11d6653babfae464b69fbd560dcfc2

SHA1
7cba6433f8799d76f94fdee532416b6fef788a14

SHA256
eb27dc88ab15f271265f379bfd8f4bb07cda8ffcd05a038d97a2cb00024ff906

SHA512
1209aaac1d518379d538f59d157c294fcfaacf3acfb007a4aec02bb55e534fd6d17c0eeed5c5abb2e86ef60758064c566e5a72f81d1fe51940b839eaf0349843

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
981a69c983db5fa91d173623e93d7513

SHA1
16054d34549b2626ea294a1808bd0d8a5d38c2f2

SHA256
5bbb804ed7a98274d5a82a6b119b4351d76ce1a296d5e6127cec0305fa2d6a31

SHA512
073d227cd639a9ba049ed8b0c2da3351b0c3e880c6667407c6101ac2b14f921e47d16cb0ff3239c8ead6070786c8dc24e4881587cdab17a16cade72be962fc0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
0948bb4b191766603e678e0f5771845f

SHA1
d8e5272a1b38e39bc5d61e3ad1fabcf5d766f17d

SHA256
ffacf9f431987f47d65cfabaf8485f504ae8e6eae059e853ce37e12fff697528

SHA512
0f6abe25c168f3885a78ba1cad6d7a9b4146d353e3d470cac4981298f97290f46efb32d9f0b0d734c8b15911c545674ac153957ee0eaf0461136c58e22683f22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
6ba9db3478b5ffdba600145c6350c28e

SHA1
18136bebc35043b5c128ff2a7c36e222b3b28cd4

SHA256
2f583d10b0c91ff108a8664be00d618931843b9e0737966bd649d5729fff4948

SHA512
865cbcd9f026a3a263b590b8d02f651ec4edff8067944d28f3624a1fc7808663dd3161027021a90d47bfeb775cde98f63c9178f3d6ef760b0669d3e6ea259272

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
45b63df93f723ab72d7f89349c0f3eb7

SHA1
f9e1aafe94b3291ffda7d784178383b80680a615

SHA256
e57d44d6eb92d0847e5a4b437c4d047f4902e7d1dd66561969082992360af224

SHA512
1e1e97ac7ad9354d17f8d95adab0db66f4d81b4f38dfd9acf79250607473b72532410930613375e0c13a7dfb6d76221c6460e919b28ec4ecbfec6f7c06aafa56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
12a2e83634826e18021c94c76628000d

SHA1
055e126199b31f7729f3206b5bfbf51d0e5e2780

SHA256
55d936905d1ae4c8741ba6752263e40627cbea7f6253ce57f6ef47d40ed42f64

SHA512
d36a8e5bfe611337c112e52d8616cca0b6b5321cba5b2b28212ef5f74568b3c21a9cf166edbf363c3060c6bd7e59cfb2920e050e29f3484d50114b5e3f1b57d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57cb8d.TMP

Filesize
370B

MD5
7fed2454fad174bcdcbf8eed4558eb69

SHA1
1b4f5d0777bf3ec17a2881b0bf8e46306460654b

SHA256
152ac9e29482298a0a7274ec3cbf6368813ac90981bcaefcab7d552620df01c4

SHA512
8b37b6f11033484bd56c61aaab6f3cb549aa4df56bc6dd36833bde381ac86830e4cb8bbb42d2054340161465aa9ab16984ad457cf7d28420429d2d45d237581e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
c79aef377048bceb925e4c9f8f775fbb

SHA1
605f1633a966eef20e0d5891154df67b16b2bf1b

SHA256
75e7ab74ea96267622d0f1aec3f8f82e1a0484dbc5ca450a6ea35538d8f77ca0

SHA512
116393b188b7587271eddeed2dac3388b0505e2723bd15d15ecf690f438ab3f702f415349075fccf98f501fc36f0ad5a23ebebd0f2f39080fc7abf067cf73f7c

Download Submit
\??\pipe\LOCAL\crashpad_220_OYWEVWUCIFCZSSHF

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit