b7d6bbea4d724328b0c93d6deda1f0a4e3f98b106b24b39093e72f17a0d3be7a

Analysis

max time kernel
145s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
12-12-2024 04:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e49d15cdbb15c76693ab6f51bd66705b_JaffaCakes118.html
Size

118KB
MD5

e49d15cdbb15c76693ab6f51bd66705b
SHA1

5b7feceff62b54037f6023cf7dd2f3a13bdf8dc0
SHA256

b7d6bbea4d724328b0c93d6deda1f0a4e3f98b106b24b39093e72f17a0d3be7a
SHA512

5eec16ea9603a95000b3d3660d6e53536d9c038ceea35063e658b60f5cca3b96454f684fc8d319d263f9aaf276b6e49217c58fa85e39b1598a85caf6597d5326
SSDEEP

3072:wm6JEErYP+++NsOZHvOodvh7B3wd/RNHTcj9iZc:wm6JV+AL

Score

6^/10

discovery

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
54	sites.google.com
56	sites.google.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1748	msedge.exe
1748	msedge.exe
404	msedge.exe
404	msedge.exe
4772	identity_helper.exe
4772	identity_helper.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 404 wrote to memory of 2988	404	msedge.exe	82
PID 404 wrote to memory of 2988	404	msedge.exe	82
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 2668	404	msedge.exe	83
PID 404 wrote to memory of 1748	404	msedge.exe	84
PID 404 wrote to memory of 1748	404	msedge.exe	84
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85
PID 404 wrote to memory of 2220	404	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\e49d15cdbb15c76693ab6f51bd66705b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffe16a46f8,0x7fffe16a4708,0x7fffe16a4718
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:2
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3060 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4640 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7092 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4556 /prefetch:1
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6476 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6388 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6376 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7372 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8140 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8112 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4036 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1924,11407524125419164643,9172657963063235794,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7936 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4088

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2844

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b8880802fc2bb880a7a869faa01315b0

SHA1
51d1a3fa2c272f094515675d82150bfce08ee8d3

SHA256
467b8cd4aacac66557712f9843023dcedefcc26efc746f3e44157bc8dac73812

SHA512
e1c6dba2579357ba70de58968b167d2c529534d24bff70568144270c48ac18a48ee2af2d58d78ae741e5a36958fa78a57955bd2456f1df00b781fc1002e123d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ba6ef346187b40694d493da98d5da979

SHA1
643c15bec043f8673943885199bb06cd1652ee37

SHA256
d86eec91f295dfda8ed1c5fa99de426f2fe359282c7ebf67e3a40be739475d73

SHA512
2e6cc97330be8868d4b9c53be7e12c558f6eb1ac2c4080a611ba6c43561d0c5bb4791b8a11a8c2371599f0ba73ed1d9a7a2ea6dee2ae6a080f1912e0cb1f656c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
4a2e9fbb96898d972e24adb7474ea114

SHA1
4f13f486ba663eafba6e742bb14e5c30e9e16154

SHA256
a7301b9cd250532e0cf445aae85998de13a5a3ae7c5ebbdc1d520630d184166b

SHA512
9407a3596e603a6e73e5aa2247c7b7a84cdd08801a7723badca6c6ed895d0398d1429c12f3edbf57cdcc560f606b28f10b139607b892b46c906d3d6fceda6a25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
f2bb2ba4ae99579b07b78ed76176b40e

SHA1
c6bb7171a7087972482fc966b7604127d1d54454

SHA256
08d47910a2f79d689ea5934de115f4e3a21740f8b016af85dfcde0e10566e519

SHA512
0818117cddb2267e760ac2e711cda98d2bfc581756c1a9d8025b1c079e28904ecafe93841b5e329ba034fdc1c2d1485850f8fb4bbd3adbda795ed7a469e8831c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
3f65fdcc208c01d5c8323df609b4ebd6

SHA1
6992b416c60934048ecc284c12a5516f915751a9

SHA256
2bf70cb946ccc4ce3f4b54dc7d85e482a03236db8b35428c6d188eff0c7995d0

SHA512
9117d0bea2c172498a81a61f19499b35fbc4cb259ca8b293756cb1dd7fc35c99093b01aa216b91ab4822c8cd7cfcb6c0e20438e431bd0c7ed22bacfcfdedea07

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
a001cc0c2e900f8cce841c0472446346

SHA1
8063fbbc77dd718f732b609561591e2bac1462a5

SHA256
92e44d3d51c0014a40ccf2462b57d3db17b84b3df8984e229fb5f77badf13e46

SHA512
19aaf31501c0b868d53c4ac7c5ca51c360c50d44f3042902830a5e39fd708b9afa33638e12d9dfa83ab4551fc59383c690351c8951968d507c3a175267fdf514

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
9fc2f1b5aff5eae134975b7ae2a9dcb2

SHA1
002c313adb7f3ab423944b07598c36b57c5abfdc

SHA256
33ba87ecbc2bd4e266d451b0f19bd79199aeb6a5e85b28c09f2a7a5ecef62faa

SHA512
d779cc142b6603659521341e871b239369202adbd0bb4a2fed79f2203295811c005fb056eba3154febe89ecf7e324a0f7ded33a805d2b220c8d1cebaf56d76d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
707B

MD5
8dc222da744c1cf34dd5d67659dad329

SHA1
3f97814361ff96bc02f5de3360caa33d8814d2a4

SHA256
9668f5109ff36873e912f6048f094492ce069e5f0837835e5842dba7e0e0e89f

SHA512
df42849a131b9f00e5aaf0193e99f22dc3ac6927c1c0b8cd27c63d8f0a246ffce437bcbddb279db8be9e3d65680cb0e83a3a3e7e217df6afe1e33dd6c45a72b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
372B

MD5
1bf51129c689c57c7dbe466f47d8b34d

SHA1
64dbb636a792e0894e2e9e81113246bf712cbf9e

SHA256
c9d2dba874cc6b9bc7f448b5d69fb643ff7a0fda3ca654122adb00c58498da4b

SHA512
35a6471f2a3e01f7f07d1daa85085b0ad6b93344a7c213784f76eb59f72bb12683021be08ca527057a7cf18d5bcaa79f0806eec7901cd8725eb0790392f62a51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
540B

MD5
689c8ad1edf291a289b6ed9ac639edf7

SHA1
b1ec04b879a42da81cb5258ee5d49a32d5a21177

SHA256
ed0cb91c0c27168838a3ef991087385e80df9396e077a16793bcb4b6bb364aff

SHA512
e701fd83cdeb7df7c5ab6ee2c7d4a8a441723fd4ae386bae64ce5e047398f363a991c7ede590f4a5e788f91daa13212d975efe8afb28b14f5ebb7d52a3692844

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe583999.TMP

Filesize
204B

MD5
8096e1487e6817c309ec12c426119f0d

SHA1
0d40a175cf98aa480b21c2d31e192e57b3a019c8

SHA256
a8fc878e3b483611f9918fb797b252b2c98d1ed473b5f9f7f39dbf3bbd70e596

SHA512
0f70e164b34c7c6e827cf1c8aeb80bed9a3c1ace56b007047d1091f5f7c01214757c41c936f67d6079cb7b710f5d31d0eb1cf7a0f83d136d13382411fbbe76c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
3c7a4037cbfa0cedd6fb07229fa9cfde

SHA1
13b373873250c225c5f8ebe36c8c34793e5a3b57

SHA256
ad01f2fa3f7116202707aa538171b7fb4670744f3883247250f76b6c399d5ed2

SHA512
f11350ef3b06e1c4f21f1fca22b56f6065ec9a713e07af07345e5be4133af8d1004fcf5d8ef6d6810ab4fdb550aed426c944792e078b6fc6a96e99d3d8d1e4f6

Download Submit