1f99d9eac220348649f828dc71a2c804db7f4d4e40176e6892553990a3a79bb0

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10/04/2024, 10:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

eae2bd126d1f142dd838fd29768524dd_JaffaCakes118.html
Size

121KB
MD5

eae2bd126d1f142dd838fd29768524dd
SHA1

86162635db7687dff5f48ece1e329a198b0c8fcb
SHA256

1f99d9eac220348649f828dc71a2c804db7f4d4e40176e6892553990a3a79bb0
SHA512

e8790de2da6e77c56de022a39753d166d3caf7c8964add7c4aa828cf724aabbdd0ba2434acc20a5716951d0bd66d36b34d2dd6da0f2264cab94afbe015d81df1
SSDEEP

3072:roHDrGymOAcBWyeAcBRpdeN06D8KaFpJRUOWy4KEQSBzN1lTVq6zAv/KIWchjQhD:ErGyJAcAyeAcXpdeNiYZ0EJzB

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
1852	msedge.exe
1852	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5112 wrote to memory of 228	5112	msedge.exe	85
PID 5112 wrote to memory of 228	5112	msedge.exe	85
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 3400	5112	msedge.exe	86
PID 5112 wrote to memory of 1852	5112	msedge.exe	87
PID 5112 wrote to memory of 1852	5112	msedge.exe	87
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88
PID 5112 wrote to memory of 3856	5112	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\eae2bd126d1f142dd838fd29768524dd_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc5aa146f8,0x7ffc5aa14708,0x7ffc5aa14718
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4540 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1712 /prefetch:1
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1864 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,13241563833644432859,9186005862351236530,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5224 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2672

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:868

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1732

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e494d16e4b331d7fc483b3ae3b2e0973

SHA1
d13ca61b6404902b716f7b02f0070dec7f36edbf

SHA256
a43f82254638f7e05d1fea29e83545642f163a7a852f567fb2e94f0634347165

SHA512
016b0ed886b33d010c84ca080d74fa343da110db696655c94b71a4cb8eb8284748dd83e06d0891a6e1e859832b0f1d07748b11d4d1a4576bbe1bee359e218737

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0764f5481d3c05f5d391a36463484b49

SHA1
2c96194f04e768ac9d7134bc242808e4d8aeb149

SHA256
cc773d1928f4a87e10944d153c23a7b20222b6795c9a0a09b81a94c1bd026ac3

SHA512
a39e4cb7064fdd7393ffe7bb3a5e672b1bdc14d878cac1c5c9ceb97787454c5a4e7f9ae0020c6d524920caf7eadc9d49e10bee8799d73ee4e8febe7e51e22224

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\407a367a-1d09-47b7-8a39-b94f0c3f0be9.tmp

Filesize
9KB

MD5
cac9a6021590239e97bf3e0c2ee64f93

SHA1
ee53839ef53cf99c0428a6bda27c4ce75e7ee174

SHA256
ce56019e735b092db1df61f98fc4697e19f32be8597ad91f29c53e51522f6bea

SHA512
b136386845480f478637704a4c4fc7a18172a7ce5999f77f016391a0fb2d73ab204cad79e61acd45df3615bc3720c05f4b242d6d4b7f4c6732a6514a31bca630

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024

Filesize
44KB

MD5
26a55dcc6250e84042b29959f5e50334

SHA1
fc02ef852f17b4f9ff54e7c677145809cc205759

SHA256
d374d2ac88b65c3b78fdb96d2c6398493dbee61549b39c3880a584d2bb1be825

SHA512
33db6af42c615f586b412bbfbe0b92126f91c4b80f9259ef94aeea103498cb53396e28c0e9b1c10bde0802915f8c8877c596f07a5c5c61f4a90cb1df06f67c4b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
1c8a1a81e9a7d9b5a180bf1bb63a57a3

SHA1
5cc89ab0ca886015ff6f8daabd311abccf685109

SHA256
23fe9c8daa33277eb6a1b094508fc69ae4169cdaeb0473c5df9a70b71fc35467

SHA512
b1ec27e5c59abf5a37541746b7ba02e9d009d442f05074a4453d813e9d6cd6482ff2b51f25d0895fcc9eeb70f72d92b22335a755dcd0118506ae32373452cf13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
90941a244052b533c61e4c524e504c60

SHA1
5b2ef67eb80b0c876b2b755f9bf88b6edbd912b2

SHA256
d0d9015dbb68159a08c35d90fc1ebf5e941e0ee1058d43ede7ebf96d94b2fbe7

SHA512
aec39d74c3d02407dcf276183dc646e50eae5c32b264ebce21863c0a427eb4b9e4f0e90c726a270a08f338a471c0bd6ea037e8197fdde9c593a56de82a8fe152

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
aedc24d04b60d81064d41c717c410e2d

SHA1
6c8e5ff8ce3186666fdc20ee3b87bc2b8d751e86

SHA256
92eecc623b61e22748b42074c4f180b2d6c730c3f9c049f6b247fd65ea85e653

SHA512
3c18e653a195ac87075ff9d2b83efbb35c292cf8bb9919abcd2f563fb9cd6b783434ac5aad9f7f64a63cbc8acebf87c240ce520e96a6ca7f41757458044aea2b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
264d6502f873d58919ab5dc1ff95050c

SHA1
79baa1319bedcadea22e1d1c5a9a20b9946d5c89

SHA256
3f6f6138a96c5c45ab03a4844599e12524d21e445f8cc099a7d74043307d16e2

SHA512
14dd9c7967aa2149b090b27a37252c9bad512e7e522ab5839376a99fe9d44a5dc3b8f1c6cc53d5bd99adf2c8b130e43625c991dfd244cdd94b6031ef6be5066d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
8d8323d3a81048c2bdf90fa9bea8849c

SHA1
e19a2a02c54152b3e5370a824de8915f4118798e

SHA256
f554fd533e2a12b2a812188115ffab54f0be9534bb02b97f8e5e261b82bcd17e

SHA512
af67b419e6cbf0fa040a08108826607fa8541f44dca2cced4941b50e024ab087845fea8cc3c9f3c3339cf1fc0d7f16e71e50ac33a27e78451aeec81111c73874

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
852B

MD5
3f1fc3a3a27dbc14c5ff378b810d4408

SHA1
5fcac93de56673b36ede7dc886a73d42e977d056

SHA256
6f36d5420cc0ee199ff321b157dbb327c409a3a11a3e090da2f2e564f8af73c7

SHA512
f776aebb8f465e77050e76ee0e199d4b935b1f528cdbb6e7fd784f056ac1bdad6477dd6eeeaa2fd38a3b535beb110745292d01c84fd383d277c1a12e464d549b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57fc23.TMP

Filesize
852B

MD5
55961413104d48a39379132bd56eeb79

SHA1
6e4209d1c13312198d186e726f67a3ad12246925

SHA256
dc85d990bc6a3a26dc69e60db2e3526d7377dff521ea93f9e161ff3f32ef9a94

SHA512
eb6889a287d13046cf4379a5d935b25d94311c336273d4cd7623ce87eef85a8d5b68eae5dbd276a10c915c0bf2abf839a6d7836af054efcea62f62b95fc2d474

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
01882acacfe66365f2884ab0e4a3a4b4

SHA1
70dcf9b7dea258b99db6bdac438e470348edcee9

SHA256
b234e920160a87f053dcb2c11fac7ff2fed38ea62961123bcfe1cdc213c426dd

SHA512
7b2a85e6ab5217f8866a9d40c4e3dc57f04f97b6899cc930ac961a9603bbca04207893a15d3800ba66252cd99f8dc63af23e671b0d35ccd0f844c3e991076336

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d2507e9614068219b146dcee53cb4807

SHA1
cc7035380246abc86fbefea89e8948d477b7d721

SHA256
1b214d5b4f55921535ae44ffbdebfcbee4f0b7f7ad2b9af215eec5ff222d7f66

SHA512
adebdc584e47486dca3165fe4db02cca9e61eb4bbf5c4f8dd17dc1307dd4a8485bc854b0b647e87ddf99ca72cd8a681808c7eb7ec32e54acf7169741f517edfc

Download Submit