410c1b917cc64fe76c75e6c9d702086aeb6d4743eb23b95ec97e11063cd2dc1d

Analysis

max time kernel
140s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13-10-2024 15:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

40b16f6a8016b47cd45309ed687ce573_JaffaCakes118.html
Size

65KB
MD5

40b16f6a8016b47cd45309ed687ce573
SHA1

0df519ab3b3475eab22c02c324ffda8abab43470
SHA256

410c1b917cc64fe76c75e6c9d702086aeb6d4743eb23b95ec97e11063cd2dc1d
SHA512

991f4835880480e633f9d9c66c2b0577c8490c366cf1351043b8bff66a10de2936dd57334d423ae25b6a80c5e93b48cb4cc9e2e6832ecf2d14b81604f8d3bb01
SSDEEP

1536:AOz7rELWxykcHmNyWt+huN1FAEiVYlmJg6R4mNV24fOQgNVeJtocBzZan7EtKnzA:AGrELWkkcGNyWt+huN1W+ka1UY+gNVeT

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3376	msedge.exe
3376	msedge.exe
348	msedge.exe
348	msedge.exe
4184	identity_helper.exe
4184	identity_helper.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe
348	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 348 wrote to memory of 2480	348	msedge.exe	83
PID 348 wrote to memory of 2480	348	msedge.exe	83
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 2156	348	msedge.exe	84
PID 348 wrote to memory of 3376	348	msedge.exe	85
PID 348 wrote to memory of 3376	348	msedge.exe	85
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86
PID 348 wrote to memory of 1624	348	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\40b16f6a8016b47cd45309ed687ce573_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdd3a146f8,0x7ffdd3a14708,0x7ffdd3a14718
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7160 /prefetch:1
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2360 /prefetch:1
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6824 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6980 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7088 /prefetch:1
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,101661831317746826,450293892443710003,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6840 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4464

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4472

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3756

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1656

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7cb450b1315c63b1d5d89d98ba22da5

SHA1
694005cd9e1a4c54e0b83d0598a8a0c089df1556

SHA256
38355fd694faf1223518e40bac1996bdceaf44191214b0a23c4334d5fb07d031

SHA512
df04d4f4b77bae447a940b28aeac345b21b299d8d26e28ecbb3c1c9e9a0e07c551e412d545c7dbb147a92c12bad7ae49ac35af021c34b88e2c6c5f7a0b65f6a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
37f660dd4b6ddf23bc37f5c823d1c33a

SHA1
1c35538aa307a3e09d15519df6ace99674ae428b

SHA256
4e2510a1d5a50a94fe4ce0f74932ab780758a8cbdc6d176a9ce8ab92309f26f8

SHA512
807b8b8dc9109b6f78fc63655450bf12b9a006ff63e8f29ade8899d45fdf4a6c068c5c46a3efbc4232b9e1e35d6494f00ded5cdb3e235c8a25023bfbd823992d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

Filesize
23KB

MD5
2f24e0f5d2c2997a89fb4a8d943c141f

SHA1
99515bde1a5bf72105116ac902ccf3db1dd3df29

SHA256
60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf

SHA512
0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
b64d9aaf5545ade52e77fe80011f0323

SHA1
bfd99b230ed1c8f7c5ef8cc5495133533ddd4476

SHA256
78e99501e74029838b1b6d4257ae67e051d095f3ff140156983122f6f4903ad0

SHA512
aed03524c1b3b7e3635fe7c4f875d92c004ec6e143b8b2124b8f2659be3a1db8cd0a8cce82b064b2dff1906dd179af0a06d168f3db55d9e8cb2f200f393b0ba0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
cf2208d54d2836b155f0b89d43663a0b

SHA1
0bccbfacfad0652adec8a8ccbf9edd4ba71ded0a

SHA256
9f313bf6982fcb38b37aaec655a380f5f5013fea0375414c00168fdec7cd4da6

SHA512
772351a55eb42832def95818e969115a7f22d9b424d80d60e36fb2f6b5f596faa2b2d66a6f6ff2860e2b6a7e1b3350614dd273bc8c9455ac10be768910f269eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
954d494a67c30847a96abcca312d5a98

SHA1
d0942bae02c7efb86e888b1b636454d94d75f257

SHA256
5fa1c0df3fc8eeb78b311327828afd9eeacc264679383e6a8006412429db26ef

SHA512
98d19b12c66e507c1ca0bb4508149b0a7d8832810ff62da40c7ec936ff8dd44d7e357749f4a92626f408dd631c574ab6527df9db1a53a9d3aa958d60bc8a22a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
21b358068dc60f81b494062d3e6fc3d9

SHA1
7dfabc42d38fa1f47c8acc4c02cf4580ed2e1d9c

SHA256
9700b6f886ba7c99b40524e14038218ef90c4053698d7c95a43ad0d7c69e7635

SHA512
70aa9a8a37fa9ffa528c8a0530f7a7f0268378e6d6466c3708e5a298b927e2600c762b506bd02d7c4f33f22a8d6618a400bde5a8276376efee1c8296e83e55b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
845c38712b006495c86ea23dab7d1f6f

SHA1
aaed91368e5b202e9fc4012b49cdc97d7b42080f

SHA256
83d269c7c9d404eb1a90ff62ede927e9d23b85c14d171055fe1e8359ac94041d

SHA512
8cb20b7bb33d46e609a4335ff598020f3a815868fadd9e6e22fcd3a87297399766990963c3d4d0d521c572754acd9d3e72a7e29133f91ecd8dba58937988c03a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
5a68f9b152f86d3fe030ec59b58e76d4

SHA1
85175067bff9ca53d1e84db4a907eb4ced7c9a0f

SHA256
d2a6c2022b307b7e1ada16e5cc4bdfc26016c85d73712539404a16bfe10c260f

SHA512
451856fdf433f77656f61f779c6e61b97fcd5bce60cab3459e45e99adfd068223436915de12ccc8be22f95bd9ba8d9835523205c979a43be09a61925f04088cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8d1c4e26b4a21c7b2c1f06ac2d75e4a6

SHA1
1d4319e61e42b0a8b967871810bb7587071e5d5e

SHA256
e73c1b06f74d5b24a66cf4609b41d9db2dbe50922b0306bff41c8aae574f3c99

SHA512
7a8ffb1c740ef469c465199a1d664e064ea099f5411020b4de46782108d0c1a7a471de8bfda678a83c2743ffd4c70f8f83efc2ab91a60909e6577c5ccc1c4a76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
5a06930f12e7247fae89bc7d3caf880d

SHA1
f17374c7ef7f0b999c518de8f488e4c2e5ea9617

SHA256
e43d0fb07de739dfec286469f6e69d5fad61ca74a654df342c5851e3c6ab2fad

SHA512
fcb74b309c3ccd591a022f3835ae7ea39facbefa983214b496cefba48b65bc788b24b888006d3ef46c9f7f4af703c56106638635c9555aedba39368c7f2a39ba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
1fc65bb1495967933e22007fcb617d77

SHA1
260bd5106325c695fe488d4ab9333f5a00916f25

SHA256
7b22c02d0082aa2d3f8c6d4456f0bb6412a6cba37f0ccc6a843de49dcf020357

SHA512
af9a403316f4a1f7b28308c0b18b41b4176515e228f43f657f37190bfa0d5a85b97f9f20265e8fbac7f06866abd372eb70674b4d7d8bf9741c78b4397417586e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
a9619d28b974a6c6c9d6c07c7256940d

SHA1
cb59eb0cf801ff886fb9fd469ae8c00ca0c71e72

SHA256
90cc06432e057b6ce385d02646efd0be5718802714482172da8caba8acee7855

SHA512
082109f703fd7c93323435f2252cae1962ea4eff1f63879c9f6739b4108943461ec73f7ba33376fb9bb57a39f12627273bcc44b699abcbeb4916f3b9856f66f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe588e31.TMP

Filesize
874B

MD5
5c641a8046f08d0bef8891f3a2cec0f3

SHA1
b3ebb27390f14565feb63cb0a782ee84d4cad00f

SHA256
66685267e352edcc4ee5220f8fb53a4eaed961bee1f78dc8790ab5dc2ba0ac6b

SHA512
0c74535e2e76547723a05e4e8e93229263b41bfd1ae7f44284ef9dfd37c203aaf3539f7ecd1bc560a0de221f50113831aa4e5ccb7a6a66408a637430b0130dd6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
423d0f28c4a89afb3f7f8de9c13bcd4a

SHA1
f8f5aa2302ccf44328db76bdc45e3282525351ee

SHA256
806226538cf41780bb9d9d4d5e8bdf40ae2aa817054ac08876949f2822021b06

SHA512
4604d889210fe7f266ebdf372a07de6e92070a5592f491dcc98f4915688e2292184d6451fa2636d9897a6654e0b30c50a78e1c33164884d1121d8d022adaf0e2

Download Submit