772893fe83afd8f62c36ebd5179caed5b4dfe71b2207d31dfad08eae15f09c6f

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2024 08:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9a6e9c2681296d620bdec2dfc2c69cb6_JaffaCakes118.html
Size

65KB
MD5

9a6e9c2681296d620bdec2dfc2c69cb6
SHA1

5ec1870aadb0af28577eaf9a7e2ce6ff0368f781
SHA256

772893fe83afd8f62c36ebd5179caed5b4dfe71b2207d31dfad08eae15f09c6f
SHA512

34164717ca53d1bdc9cbfb7187cd2c9e150a94f128b16353f6f5fb304089200660ce2b3f6f35c8fb9574ffba605b0e422a042fc5bf81e9a8eb35bbde1ee2b8eb
SSDEEP

1536:jwgr8VkeO3S+GkNy0IygZKmXbQiDoaaS6cgRr7z1hD:DeO3S+GkNy0IyjCbRDoPpz1hD

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3488	msedge.exe
3488	msedge.exe
1800	msedge.exe
1800	msedge.exe
4680	identity_helper.exe
4680	identity_helper.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1800 wrote to memory of 2932	1800	msedge.exe	83
PID 1800 wrote to memory of 2932	1800	msedge.exe	83
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3960	1800	msedge.exe	84
PID 1800 wrote to memory of 3488	1800	msedge.exe	85
PID 1800 wrote to memory of 3488	1800	msedge.exe	85
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86
PID 1800 wrote to memory of 4664	1800	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\9a6e9c2681296d620bdec2dfc2c69cb6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc7dda46f8,0x7ffc7dda4708,0x7ffc7dda4718
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2680 /prefetch:8
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2428 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6120 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2428 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5856 /prefetch:1
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5980 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,15318696630367822779,7669042549933422921,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
  2⤵
  PID:2652

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4552

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1604

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8749e21d9d0a17dac32d5aa2027f7a75

SHA1
a5d555f8b035c7938a4a864e89218c0402ab7cde

SHA256
915193bd331ee9ea7c750398a37fbb552b8c5a1d90edec6293688296bda6f304

SHA512
c645a41180ed01e854f197868283f9b40620dbbc813a1c122f6870db574ebc1c4917da4d320bdfd1cc67f23303a2c6d74e4f36dd9d3ffcfa92d3dfca3b7ca31a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
34d2c4f40f47672ecdf6f66fea242f4a

SHA1
4bcad62542aeb44cae38a907d8b5a8604115ada2

SHA256
b214e3affb02a2ea4469a8bbdfa8a179e7cc57cababd83b4bafae9cdbe23fa33

SHA512
50fba54ec95d694211a005d0e3e6cf5b5677efa16989cbf854207a1a67e3a139f32b757c6f2ce824a48f621440b93fde60ad1dc790fcec4b76edddd0d92a75d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
71KB

MD5
da52e38c98b0f2047abeb07609608ab5

SHA1
da1210caff36df73e49a0c271ff7d573c2d20d02

SHA256
726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

SHA512
35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
61KB

MD5
468446a7240461af44b59ebb2047c231

SHA1
47b7c525dc91bece99df0c414960b9490b986ba8

SHA256
ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

SHA512
ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
18KB

MD5
febf1283f0f0258f74cb8e5c49dc606e

SHA1
e3ef5dd0b99f82e853c26c5baba24e809a8815f1

SHA256
3b2ed669377a36928eb7532ceee7516ace78e3c551ed766e51cc24d849439af1

SHA512
7ce4b4c9166ad45caf54a4c1a07b686e8a7d88cce785689f890ae96c05c06934ac0618458548bdd7bdf8c9361da5d03f016e727ef7c2d5380c635cd5f56fb288

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
24KB

MD5
a03fa1e6174c45c168048d10b50fe352

SHA1
d1c5e5a7e67f7d0921b2dde8a7f9fb0c733e2590

SHA256
c50e9750be5de4b2cb97372af9e4414eb8195ff93fd3ea771b0cfa1657ea4762

SHA512
26ebe8b7c94247a3adc7a0511ab03b57edd821381d91ea9ed346151d83fadbd817d8b1dc3ea25a083505cdf9639ea43119f9974490ab734beb6b182964553190

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
18KB

MD5
237a116d4364332a7403c4de8b29b213

SHA1
39da8ac9219f8ae6d3083f45e10a73008e4a05d7

SHA256
f84c1a598f57f36f8e1f2330826f05cd60765cec763755296a3727237b4d2d16

SHA512
b75fc72416c74a450e93efb32e66dc7e273349754b763b553dd81429f1d7a53538323bfddcd8d184fcdc48602a0170242b5e85246cf63bca943508eff5b187ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
23KB

MD5
143d6bab8c3548163f0e3ab0e722c787

SHA1
72fc818fd3d32d8cc1d0d8eab964b0de130f3949

SHA256
ee7eae7b1317ae5fb8c3f24252b103552cad268f775c25814d875b0f9cbb8165

SHA512
6bfc076f89d24e1ac74203dc0b8bfc614d90b67f64dbfba8fe2be346d52af6566c84923e50b9b05adc7a8400f9fab53497ab4753c75fdace635b2e0563276dbb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
27KB

MD5
f0ae88bf1e04d8467499c10ae5f40915

SHA1
7db807bf7215c2b3a00223733433de74fade415e

SHA256
e6fd8a5cf374d44adcafc29668ebf302ef16e73cdad6a2979cfc60d79b780cf1

SHA512
9daa365c6fedf8245ea4f5bece5c420be7ff93d0a0cf9ce782fb5e000fe114ec6900697aa8c01cdac2577dc101b68420ae5c6bb825e876124a4f019d0a82ee07

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
32KB

MD5
b117480bfec5276610394247a53548fe

SHA1
1379c34e51e179b6e4e2ff76c588e8d3f27858c3

SHA256
f26bb18c5e76c20e265f15ccaa9a9c0a350007d8ffcfd8de3f13e0cadb22e99c

SHA512
37e27e3d0c20d7aaab11b096fc004e1d652d78a7744e45dc1b016993bb280e3ba7ed1f65b2ae9e8782f6acce4bf5cb8b7e340af41f53fa35690784d358af7f7e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
23KB

MD5
1ff53dae34c4555156d935d6455b5e8e

SHA1
7b0d480ae156810635d33de2750d7de405c41c62

SHA256
b60890e621ee1f1885e164572c092e6dfcaca3d7c7e2b6cbf65b5acbfeb6a998

SHA512
103de10e245e4eeddd8611d30f62a74b16b364b5aa90c866c1d239649363e42cce013d83520b7e3fe2c17ca709421168f78736477e124dfa841dc021f512bd1f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
52KB

MD5
15cd09b43a09f2b52c56d9b83ec576c9

SHA1
c85a6ec788bf291348cd2c89eef346b68c12d38b

SHA256
6361410ddce0fe1600ec899648c8f731095850ce6f6a49c08b1558016308dc1c

SHA512
a00c2e1ad5ef5a52ea75804b3226873a9ee20506c475b0ee07d8415561ad19839b4dec31485dc804e514dab5e0c79a8b15df659dec0263699efa0533d9d31016

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
32KB

MD5
0192ed367467fe7293cb47794a339b71

SHA1
95edeb67c95b036ee3e18272cbd0b9eeb5e30f13

SHA256
7f29573f91e4ab9a4dd83a20a9751930fc827410ffa0865eda610141b6e34716

SHA512
1ea83ee50325d4c5c348e0cd3dd3a64efe4b26cec999ce42a9dfbc625e1061badfebdcebd6784e536ebdeb0641ae8907a87dfa36c46ead7b4476e67ebc59798c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
20KB

MD5
78b7e2bc0c3de7eac1c75d6a1eeb4c84

SHA1
b2fb8ccd4efb0195343f86b47d695b880ee204a4

SHA256
99af8df48b04e1f8036d2d85158afdc222d00bf53cd7245b0bc82583b3c83d5e

SHA512
26c78eb2b6b08205db7abe4c5a7c61a1aff33c0a49da9bdd600d299bb3e863dbba34fbc9a38f1cc879b3040d4f89c23a84046d830d5d928a97415c8bfc64d80d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
76KB

MD5
370efdc66d9c25454b6930b4ee1fcd8e

SHA1
ce84fe659fa4278787757ecd383f398c5e4a4a94

SHA256
3ac16f2301bf7bbd3160bd361cee1da4bd56651de39299be0bc6feac7675a83a

SHA512
41085cfe80b559404c07af3f0c9d47e78302e78de7f247910d42e48fa11fd5e537e3a24cd9687711e8fae00b5e72cc6ef13887284d9779e6e65d6973876b9287

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
118KB

MD5
6a468fec8186c39967ff0f119893bc8a

SHA1
7860f106a9d5eed3f251d81051c02b744606cf28

SHA256
26988455f821a12110332ad807b830fb8740e6a4a716a94e30cbf1401e036770

SHA512
534fb6776721c56d3c8a17b3bbdc6960bbe4b553d47a8f1e6e513736f1b749900479063771e4d529376c625686ef5566af95384429fe9ee5319d1c0ef88ac899

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
0d10e18da18da4f905a16f5df80660f5

SHA1
f15b84f1646d82d2f13683b1a27956b3d8b71569

SHA256
310dfbb64335bad334127978c64f6e559ed6c625ce2e264bc4b87b06e55d0dc7

SHA512
4f0f813d9aa895d7d8712b428e2bdac2fc6c57d2db6d2e289ee15bf09a1841bc99539392b7114414b24f3d76e8670b90514d8d4ebbb0ce908fd733c1e50f3b6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
03bb6324a5f3e672cf249ff1703cea58

SHA1
60925eb034f89ad1087a2ef96c62876db4443dcb

SHA256
4740946d0dbd2afdae2a8446aaa36454e1622c51cf3f153868821dbcd308abdb

SHA512
b19613ab583400de08d5969dc08b11300ca7172d607005cfccfc697621e660732fc9467215ca08925262e74b4fe486bb38fdc377ab2680679991dfd9d8808b42

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
f3224383124bdb74cea0760a012a01a8

SHA1
a2c119c4547042b0456c307fd26eb7645c34c111

SHA256
0a313dae96996c93a2553ab0d602ca2859a7247042db667f62c1dcfc73226988

SHA512
f6211102927d284fbd38327874c22e1d9518aef5864a02e8bcf814cb394e6121b527d29dde587f7534649950e99ca20411859dc823c0cb7c5e84f6b76a9873fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
0d46989b6154d18f4754a9023beade29

SHA1
edce104cf4f810b475eb75993b9ddfe605dd4b49

SHA256
adf337a5a3e2b40100515d24dc6ae8dfe9135da5606c916858e38f3835a5ca78

SHA512
e729fc40a817d20034bb55d846a47781965cca046c707d20cbe11d24affc18d417619b2d60eb21dc352d0e4458354581fd07215bc89608afe93d3d781d25e5b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
926d7970327363fe0b70ad4912fb2f81

SHA1
7fc1d12cf6a690e790b61c996508fe10dd0275c9

SHA256
16fe8e1418cf18169ba8ae42af3372a0d58e6cbfa2a68595996988db18fafcc2

SHA512
c537bbb35434a839c329bdfd0f9ce4c8168d2f5c5ed862968f6ee4c8b1a7d785553ce15b87a1dbdaf0fbc6dc607ac56c554341936959783e890d59cabac4a8f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
5c03aa42fb6c3213b126442c3a1275d4

SHA1
2a87302e983e009a44c28a33d3e1414acbf77874

SHA256
19a42aa6bc75790f1283d4a081b5db6e35edaca27b782b5248e6dbc48c2b6337

SHA512
c5f0f6bc7709adf545b55f25c439e975077eb7933b3efba941d2cbec1cd5fc66e333b2bd3374d0e519e3a11bbf37ed9e29c87a4b3768137cd54726e52cb670a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
eb21fa9569e152a60408f96b2c4c807d

SHA1
454a0d5e3085d2570c20ac54e28d8b2a3477ceb4

SHA256
eccd5870727be2c61d087369f0af25cc26be46da1bcdd642bf3c2e18de38621b

SHA512
9fd1fd4d94c4d36780cc0873950347a96728cac947f1c9b6cba4ce368e8e6f1a04f40c7b8edfabba7a1d00e4c48daabde723076b27e25981d71e1bc19bbf1da2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d387ab762a2c29b1c023d4aa6256e311

SHA1
d22edcfedcee822358188759e0c2ba96a85509e5

SHA256
c627c35af2a8c7a9bbd8fe74b1a0ffe9940c0be2b0e5848e9aaa285660388784

SHA512
c383388acd0feca4d828007e53e415c4c81d9f1d7218eb0f74d320a2b84b53bb88c744fe6baf32fc7f6b66ae446d3bdc2a3d99368808447c4308fd096d2ea550

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
95046584484fca6482f53bb66e754999

SHA1
4d094c8e23b95598073bd72f76789be1089b0943

SHA256
67cbe0f3eb051eaf0608ca535ea10dee03a61162e55e0465bad48f7b663e788f

SHA512
fb6031692e8c928c9f44c24e10ce569a061ec351e20964cf28aa4bbc309800be0987224a3613812b116e4371865060011c4358d5b66dcef3526d0f3502407b82

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9b2f00aa5344d942692d1907fe87928c

SHA1
dceb6194d190a33c3e1c2620f9475dea53fbba48

SHA256
6612f7dcae731a53a8e39c4d155cc45aa1c4005045eb1ab569ed8befb9e1d685

SHA512
2322b9a862f7973727b4ded134b969726389ef45c0211f971f5397ccbc0d1e6a847139dd90cb13e6dd0d5a38d30a927be0488c4e57312708099b9bb1a2b9c9c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
aa544c339041f119a2980c4a2a0413c1

SHA1
ac253630aa5ea2b0aad15e4c6230b4a77dbe493d

SHA256
4836f532dadb0de0fac055057b69000c82b95f245c216f5c6628ce0685e3d8f1

SHA512
8dfabf700dfd10f9044a7a1e3397d4cc775a946ad0390789d34d6c0acedff7508204b414ad1b58b76aa54f38a4693ef5613d6b78616e5b104cc567aa8b8a38bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8c5fd76cb4d707962566535b76b911aa

SHA1
691620056407890ddc5c9c85a387544157b5b5c9

SHA256
d68b76a9f6f220831486536754426025577c5e4359631223a0f19d1e1f2291d6

SHA512
863d04ea89e2b3945070807922ae05f7df3f1ee0e89fb618759f0e7f3769d51ffae168d41f8fd610d3fc14f87b6d5f000fa9e379aed5e64e41a0cc9454b5e092

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c46f1b19194ece08445e276ffa6ce7ca

SHA1
3b974f69bb5010249399a4f05066d610cb3cbf6d

SHA256
dd42c5977aff783ed6de412eba56be36f015b7a0f2cd2e1024a166d6f3e38996

SHA512
3ad816d5e025a42934ff8f7e8f083d05bcfe828e6afa049f8047df1a3acc4159cdcfc96732ff5b0215365abc0e5e633f8bf5369e968462a03c2e6d40ffa83bfd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
a246a995610d7797e74804950fd20b79

SHA1
6f43a7eea5d0b8e3841d010e2e2152a4c0a64118

SHA256
2e5eeecd512c6d6d514b9ff267b73e7196041974af11e7e69f9f2b98caa078e3

SHA512
bac8662ad2bbfe405be32d0f794add1db99479049b30a98f79859df092e897049a1f7abd09eb433677387d363d3facd19cfa5abac0a6a189baa1c39edabdc6f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
aa8faa2b684a0dbdc1a0faf261f2c484

SHA1
58b95318f7e10cf51626b570bc0a512b10582699

SHA256
cb1d95b9bf8f5b37bc5bd8a2b82f088d7fbea79c0b020a05e8c1cc413a86d443

SHA512
46c2d09e20154e7df909f2d321ee04c3073adab35b6035738fce85c799676761b243719c2ffceeaa8d477d9d04aaa40c12ae31292f9f56634cc326431d77c508

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
a62d65311bfe965ab2e8812654dbcb7f

SHA1
eeb687779cfbd01c22c9477e2df85e1c3d8c46dd

SHA256
adb12498271d56902752c59dfbb6ac47497b57231240aa4e7f61bc1f332deb57

SHA512
2acff9429d67158ba542893db0dc32b921509eafe5eca97cbd4dcf760a3bc50569e03bb362c4b5eba647f631561cd29628deed94679c81f630d1695ef99e9f40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
4528b3b2a1558dad0bdc09cfe600a2b3

SHA1
dbc519fc5228192baca888574c671527410055a1

SHA256
90a4978403d15604fea6cb80aebfcc69d6e5dc5f42cd8e8f5c43412363085e1f

SHA512
a69efdcd14b3765bbd873b954899500d3ea1cb92bb8be2645bee92fb120b6eb372a9c6098e4b3f1ca5d17f9dab49b8dd107f4656a6f965c91279cf6012648513

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58298c.TMP

Filesize
203B

MD5
4cb4282a17650cccc9d261aca6c449ac

SHA1
d0d79e87db228e54244bb19c95491588a1292cdf

SHA256
7d005d61fa0813ffa426f03830cab2b2aebc5e36bcb67040a9fa686e887b208c

SHA512
6bd870bf4f1951471ad68fa33d732cdbcb3bf445a5940364604105a5af8700ca992c431ef333d253efc3ea9a4bac30a645281fae194f08a91a1fd6089f6352ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
3454daf78bab237ccf5d6ee8c392113b

SHA1
99321b530e822f8f8bbaa9c9750450b5577a1bb8

SHA256
e18a6ef532260f85e35e87d29e99f91b509f7e01b4d6bf909c1e2cb1bee17d69

SHA512
8228cd4519cb540271a19949429f38a761ce9c3951f803316e6ca70ad57bfb788bff43a8c0436ff0e727f077e72995f652859b706fee5351bf77e8ca32c5c9f4

Download Submit