e16747ea9fe33be6ccc4613eb26425313af2a2575ec76de03bb53dd2c19f8998

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
07-12-2024 15:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d3100facb4f24ebd5c75d18ac7e96261_JaffaCakes118.html
Size

46KB
MD5

d3100facb4f24ebd5c75d18ac7e96261
SHA1

22da7e73bebccacde80c0695d3d4b2d7165f84b3
SHA256

e16747ea9fe33be6ccc4613eb26425313af2a2575ec76de03bb53dd2c19f8998
SHA512

1afcfec8c8058fcc28813b431b90e13db8ed820234d61ed10dce7c0b77bda5481a8009bee1c0f815a16faeaa2153879147842a7e2e31321516fd9ed701b4ae5d
SSDEEP

768:EbWwgvQO8s4/KJ8HO39BXdPRtJuJCaS6cgRrCM9X2SLdl:Eawgr8VSeO39BNPRtgJCaS6cgRrCM9Xl

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4504	msedge.exe
4504	msedge.exe
996	identity_helper.exe
996	identity_helper.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe
4504	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4504 wrote to memory of 2084	4504	msedge.exe	83
PID 4504 wrote to memory of 2084	4504	msedge.exe	83
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 2952	4504	msedge.exe	84
PID 4504 wrote to memory of 4540	4504	msedge.exe	85
PID 4504 wrote to memory of 4540	4504	msedge.exe	85
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86
PID 4504 wrote to memory of 3104	4504	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\d3100facb4f24ebd5c75d18ac7e96261_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb993b46f8,0x7ffb993b4708,0x7ffb993b4718
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5808 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6240 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4768 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6228 /prefetch:1
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9541238668269701699,16047206175951849362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:4056

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3908

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3636

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8749e21d9d0a17dac32d5aa2027f7a75

SHA1
a5d555f8b035c7938a4a864e89218c0402ab7cde

SHA256
915193bd331ee9ea7c750398a37fbb552b8c5a1d90edec6293688296bda6f304

SHA512
c645a41180ed01e854f197868283f9b40620dbbc813a1c122f6870db574ebc1c4917da4d320bdfd1cc67f23303a2c6d74e4f36dd9d3ffcfa92d3dfca3b7ca31a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
34d2c4f40f47672ecdf6f66fea242f4a

SHA1
4bcad62542aeb44cae38a907d8b5a8604115ada2

SHA256
b214e3affb02a2ea4469a8bbdfa8a179e7cc57cababd83b4bafae9cdbe23fa33

SHA512
50fba54ec95d694211a005d0e3e6cf5b5677efa16989cbf854207a1a67e3a139f32b757c6f2ce824a48f621440b93fde60ad1dc790fcec4b76edddd0d92a75d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\28b39a09-383c-47dc-8bae-8f7cd46aac43.tmp

Filesize
6KB

MD5
4e9069d71aadad31582a6cb5ffbd6c3e

SHA1
3184ec0289eebac9a1ca6faba5537a575d1c7e69

SHA256
2b2e2065c76317370242ce6d8880a9aad61efb6065ee95d13b6bff362922fbe1

SHA512
574d58b353692a5bbb9a10630f782c2e3e4b1a7ebdaad2455a23e88945696246c6327c3aafb1b06342b160e1513dd0381c229f928a91dce423f824334b3c8c24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
71KB

MD5
da52e38c98b0f2047abeb07609608ab5

SHA1
da1210caff36df73e49a0c271ff7d573c2d20d02

SHA256
726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b

SHA512
35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
61KB

MD5
468446a7240461af44b59ebb2047c231

SHA1
47b7c525dc91bece99df0c414960b9490b986ba8

SHA256
ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6

SHA512
ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
23KB

MD5
1ff53dae34c4555156d935d6455b5e8e

SHA1
7b0d480ae156810635d33de2750d7de405c41c62

SHA256
b60890e621ee1f1885e164572c092e6dfcaca3d7c7e2b6cbf65b5acbfeb6a998

SHA512
103de10e245e4eeddd8611d30f62a74b16b364b5aa90c866c1d239649363e42cce013d83520b7e3fe2c17ca709421168f78736477e124dfa841dc021f512bd1f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
52KB

MD5
15cd09b43a09f2b52c56d9b83ec576c9

SHA1
c85a6ec788bf291348cd2c89eef346b68c12d38b

SHA256
6361410ddce0fe1600ec899648c8f731095850ce6f6a49c08b1558016308dc1c

SHA512
a00c2e1ad5ef5a52ea75804b3226873a9ee20506c475b0ee07d8415561ad19839b4dec31485dc804e514dab5e0c79a8b15df659dec0263699efa0533d9d31016

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
76KB

MD5
0e044c933ad4e44993bc5749f35fa9d3

SHA1
9119320712c0f86350bbf849d8b06ea8758cd474

SHA256
dacdcf99f0869a769bedcc90c19f824f7be2aae3aefe343cf5a386cc27417339

SHA512
b7ddd2f2bae7ec6c28022c8fac92aad0a04f7b357be2f22331eebacf6cae029e82e90313cd20791093cb636355b8f69d5aa9140cabd46569f2a43c981be73195

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
117KB

MD5
b4ffe22db195d7fdd03afecd3a51d82f

SHA1
f77614fe2c2362af4f82bbc77af72a66eb2ee809

SHA256
1d6c01613d3fba0fd22ca21d549fb7eda1ea166720d8b6726a1373b191ff4ffa

SHA512
d81ee08074d47805093f9ef04a3a262f855572bae4a9f7f83f0bfafa6b010adc8952ae7bb0447252d8e6f38b8ba05ae5fdf8e4bc1f37822b0799eb256eb09db8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
0110db74b4b7001f4caf943d17b4163e

SHA1
e0782dd0ab9abe4e4e54fb9eeb2e69f270a8ac91

SHA256
7643ff103764305da16e53417c5d1802db1f7a72fffcb6b1669a1ad531770456

SHA512
edb876f10a30e5676490fc0874c02d70405eee7a70503f1408a3e0a1d59cb6e7f4a63ded8ff36b97028576c97dc7ccb91a700f5a69b72225d3759d6d84d19619

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
0e08b4c4ef5a01ff84e675d47cf731ba

SHA1
6c0f042a85a2647f79bc5924bec91245a156de7a

SHA256
62fce88a61c2563ff60974b9da6e7d566eef3c83b1af71e230b1e61625a5e1ff

SHA512
9d825394fdbea48c265584176e58f300455692c419413f660ecb48248069f6abca1f0207fd9c053839267f51b50d8d11352076f0045b7f2736b6335475d00642

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
81acf6ccadcf5842606ad4c863c18f02

SHA1
10686d381090d8e1048dde81fb646fa6694d60e2

SHA256
32f9f1c35432637001a36c6d41ec42ea9ad16c6dd79b0c21a81c35a7425dc0f8

SHA512
4919c6c9f35896d0cc65b4c6e97aea2732bb8d1f2e1efdc607aa3a5695b63c8ba8e5bc23195a6630fb2c0bfcee40943aee096a6f48b8210aa9b91ecdf228a68b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
c5540ebf39e81e93fa363d238bc43287

SHA1
14ab71ad62846e16d6553c56cdc6ce0e7d9b95de

SHA256
4c0e20cd9090fd94d114f86851c6d4a0138fb90ef81a4c936b8d79029c12b8b9

SHA512
80ae75a6270455b8cf960e539ec3a8c6f758ee57e15aa33e489878a4869be992c729d0f36055fae6d76bbe9f499a3ed96e6d0918c0f15c1c341bdc6143200889

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
4ec8414dd244efc0dc94095f47313734

SHA1
7ad0d55b35fb1e3c135410cb152658d0b4f626a8

SHA256
eda7a0f8664c8a65c69922e2d513f24cfcf3b3a6abffad0a599789cbced03ef3

SHA512
e71a8178a05d8015c81cbea9b04f94b3b30e7ab7893409a4fe2329815c03dfdc41ee15f723ff92b5571af6ff83fc377a8f32a78f8a50a261d0bda362f48f1970

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1023B

MD5
771952a336d2e10d98181b58a8c04d77

SHA1
7c6d4d94a7e4f4009f5ddc97728ed669dc85a4fc

SHA256
08ad661729fc4e99ce18d96ed90e418e16f976c391e62ef3002208c36b80d802

SHA512
586efb5930a1fa92b2bede2751644c2d6d1547cd5d6f1444eccce090a263005443e8b36cfa108355d84551e30e027be61846e36ac2e26cbadffa49ceaf20fa34

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
992B

MD5
56724b9973aa523fc53cb819a69b7e0a

SHA1
5be04de9cbf8ba3c572f153bcc8761b16d9897aa

SHA256
6e75ed71cc175f5ecebf5affcc29c21ab8a069f4f3cfd8d8ee3fa08486220653

SHA512
d7a0a533696bbaf1ebcf417d52da1146bbbb34927d5293a9196aa29a43a54c15604160c3dad856d3e7143f64ab9028ba55466b0109a59a1c00f84349499763f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e8181ac9ca26ae4f40b7c33c7700237c

SHA1
b6c368b1750fa6b6fd5191ff7036b2280b205659

SHA256
c99584ed3bb2731ce7acc3a4e8a6cdcf17e9b667c6f9e21322e10d87c5d20fd6

SHA512
7e7e2c22bcf87f5974cbb3e422f29b06ef7bf795fbf0f5231f907164cdb44b520edbf8ba056ed101b85f15e00b75885fcbbfd1b46e5e2d36530e572227deb2be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e49005bd13b13f9e997910c0507a7a94

SHA1
a8fac770df7be5774008e41d1765e666acc848fd

SHA256
5febd0b11824a94798ceccf8d30804545af94e6c5b1d6282d021f4df8330f07a

SHA512
fec77cccfa21db23c193df8e2b365b6bd64ec9d58bec75eb2d9fcca471f14beb38463022c4f61681a092779708d903d8dd2e9fbf9e0de957cb15b50ab4862b42

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
fe71c2c7e546947f7774857f56106734

SHA1
b0e0c39b305ac3eba3c2f6df14312e336eebf6ac

SHA256
2ff548db3cf6d8ee8eb6323128151a2a12cc79f4661f488d85eaedc259c7104d

SHA512
2917c45987b118be495ab821d4a7f6092ec3fb5644314b648d915da5381a2676674da1967d8f71b0896f7b87c1aeffde1d2f687673f46b0c09f5f01a135edca9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
531186c8be718b629190ca9d63e1b821

SHA1
5b76c3b6e6c26b40d9c993739fbf317a9fec16ea

SHA256
0cf4ab89cc4ee3db70be2f6462ec37f587d77909f4228c0cfea564aadd8aee06

SHA512
025c0e522a4375bfc84c4c4717b9510adc997bfbf65a157c3ec4f018b61b1a4a542d91d7945b53bc2278bc504558728b6a2a176a34469125e9256e9a4d233787

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
efa974d32d12e56f4ed6b89b1c6ec936

SHA1
503c6cfd0743e02c7d887885c3e074e911e56973

SHA256
ab306c2ad12432a3fa2570688b1b757872a92a739bee3c091c6386d791e8a4ef

SHA512
c134bf0a4b2f00783e7672d0364417dbd13163ace3f9d5b91324691e668a44d59d5b2090faffad015ea31cce569ac4aa2d926482617330ded0935afe98e8b363

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
08d081647b91694827cd97ce56cce34c

SHA1
e486c9e0d98ab5868e15a9fc3d3c176717e8136a

SHA256
21b9432317bc56eecd4dfb4f1c20fdf2e043020ee36224fcd0aa400df77ea225

SHA512
38ab160200856a22dbb6ffc2d5f3a1b3bb1e89326c374c86cc226fca1e28d0e78c0f9f54b9692451018e8e6fd2ea4e9d5871e0f0d7a032935e229f918a5d563f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
aeddb81b14dbce7ecebe7f1ddd7e659f

SHA1
7c9a1f555041ef45a0b0e1fa73be59e08db53433

SHA256
b69f1d9e8dd046beb7a51176bddc29da83f6ec53035bb6537094bd0f071f46e3

SHA512
e48f30a61ad5923a90642bc8eb80f9b4f83b6d9899d4b16f7cd1835fe0edc98a2b220dfcda5444fd0cba8708b762d0db8a0ef043e01d449e169c460dfcf06a5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
d1b067fd91481d3d1627a5dcbcc707b6

SHA1
c681b88081e15367ebf3df600cd0db918e7ba489

SHA256
85388603ea854bf91f9490ca64d43565e4c4b8e6c2be84f72d4f76201c76e616

SHA512
5902d44a0f5ca121f99391971dda57d61d5c9a450c264fa21aa4198f1c2372c095fc578f3583562ade14f1e06df98a6f890c0a88ae6db1b8aa89a6f836c8803a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
083240717f11d3d0c90d4ab0e387bc26

SHA1
c1e7c0999886b95b138640bb19998dbb5d45c770

SHA256
b02264e2675260170be6b20f1157e097232337a9c4c3e813e8778b3ddd5cd9c0

SHA512
c243f83263f187295d773214a31fc2a6e0961b19cec95d68a8044d3c31e7fed87dc5716c5603270d73cd279b639c3e4c9c5d4cb284de9ed31b77c4ced070622a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe584f34.TMP

Filesize
203B

MD5
88baa996852d2f2efaa17c0a9096314c

SHA1
0b377fc513df52855f47735ff08f72589b414cd1

SHA256
821e27b3ffeee7dbb3a85cd1e01165948c1f07f60d78684d13fccf1dd12ac00a

SHA512
492535b42a9a20f3c7a67ebcfcfb65c481a02477f9810fae88b608fcdf3726d13308276a00a7a0fda4fcc7c7fc8d71358ddd5319d389db0e7a5e3a41864b2658

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
6e8dcee5c5af714bd08dd4ea14b1b571

SHA1
6c3ebaa84b29b838eea7fe731de6c20b7d3d76ad

SHA256
ee2c53233f27550b4a09993f82d765b4e92dd6d7cacf7254e0d7774ab1465a69

SHA512
e910eec5ecc7ae2c8fc8b44158f479ab988399b56295ecb1bc9c0ef60027133d04cfae080340532a86449d4286b43b182ce8be33af9327a1ac37809520e64458

Download Submit