fc377865e34b129124d8d5b2081f7cb553a2aa13c884c6af2c700810468fd9a3

Analysis

max time kernel
137s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11/05/2024, 02:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

322dd2cb9c387af7b156c6fb55f8d532_JaffaCakes118.html
Size

70KB
MD5

322dd2cb9c387af7b156c6fb55f8d532
SHA1

3cc2857739e4723b2023024376e9238764595d6a
SHA256

fc377865e34b129124d8d5b2081f7cb553a2aa13c884c6af2c700810468fd9a3
SHA512

eb86e4257eca78b467cebd0436b4d159e596c317abc7767a0dba087bf6760c1f3edfbaeb7b47b8948bb8fb5c79a9d213c108da7a07b8495b02819ef7ffeb259d
SSDEEP

1536:cJdacqFWnM9MDORThV98KFSwVaUntC5VUxmUqNbrZSpG3:Mda/FWM9MqRThV98KnntC5uxmUqNbrZL

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4648	msedge.exe
4648	msedge.exe
3596	msedge.exe
3596	msedge.exe
2400	identity_helper.exe
2400	identity_helper.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3596 wrote to memory of 2068	3596	msedge.exe	81
PID 3596 wrote to memory of 2068	3596	msedge.exe	81
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 2228	3596	msedge.exe	83
PID 3596 wrote to memory of 4648	3596	msedge.exe	84
PID 3596 wrote to memory of 4648	3596	msedge.exe	84
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85
PID 3596 wrote to memory of 2792	3596	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\322dd2cb9c387af7b156c6fb55f8d532_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8fd0746f8,0x7ff8fd074708,0x7ff8fd074718
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2168 /prefetch:2
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2900 /prefetch:8
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5012 /prefetch:1
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6080 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5972 /prefetch:1
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,17617646923756918850,15022738162436672059,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6500 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1656

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2776

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2460

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
40KB

MD5
5ce7bdeeea547dc5e395554f1de0b179

SHA1
3dba53fa4da7c828a468d17abc09b265b664078a

SHA256
675cd5fdfe3c14504b7af2d1012c921ab0b5af2ab93bf4dfbfe6505cae8b79a9

SHA512
0bf3e39c11cfefbd4de7ec60f2adaacfba14eac0a4bf8e4d2bc80c4cf1e9d173035c068d8488436c4cf9840ae5c7cfccbefddf9d184e60cab78d1043dc3b9c4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
5e6cdff4802d4a675de8343e027d3e8c

SHA1
d5b37d6744e57aff0f0e7380fc09d0506444439a

SHA256
705b03e6ae3328d77a8dbd2c559cfa60c4dc5f95caedde909beb065cc1804cf0

SHA512
a3e44d3201eca45df749d41c2707450ae96cc28c1b7f98fae2f8c1f9892837e3d77584550cb22544be60168416167b3f8bfbe292cefd0a1b0a981dacf0034781

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
b9ef11ff80116658cd4b16e6f4d664a9

SHA1
6c7c7893ec4a6e3e1c609761e6c7bfdd1770ce5d

SHA256
0c2057b597f38b90183d58bcdf44364be49592785932bad37b4975e8ff9f8852

SHA512
02f5234255cdc0b5704ede1c3c7c38d3b7a102742bfba7d99726589fb255fd63f74283ae8e0e1b34bc24a100a5bbcaaa6779d5314208285fced842f85827624c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
56fd2c01ff649e202a3476fc62ad789d

SHA1
0d489b9eb3c62db88223ce2578a269d9d1b055ae

SHA256
3bb9b0ea52bd6292519d52b67b743215b36c77ae73abf656df3b0ca1c3b4cf00

SHA512
12ddc11b276c09df7c8347a2fc545fc5f4cd42b570e5e198d5f11396c6c6fc94e5dfb88c6b6a2262101e3d7e28d82d0f8a55c2b8a2387419dea7377264299d8e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
52888f5df2fc734b06e77b92f0145cca

SHA1
fb01b6847ebe75e8e88c0624061e38814df6d3b9

SHA256
9e0f54ced5bced1db2883f979ba26c8616218bc3398dfd39b53fe5e8e84c2cd1

SHA512
f7d0ba8ea0837438b2ef862a6f36675fb3ebb8a139e0fa7028d5accf5ecf3c46ce9cc4fc2f4069365d6463a70ded3a86bd4bd95a8ea870b5e0e8457f91387c1e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d895f58472e324c7c26e1efe4d489150

SHA1
1ecba486b2f9eba555082229dfc7dc29235c3075

SHA256
71ce9887e49437f24582a928a82506bfd9935e395126d0b58ad0d43abc77e23d

SHA512
1483508473ed2e390081b30092a1204573261b27895bce6628eaaf03a0de1a10ab57d9a724b745992b4d5404f986c3878809083728710bc31d04e1480b8a3f0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
14e68ec224770c78632cd3c007a39775

SHA1
e8042fb79c0aef1a0c96c819191a507c210b2c59

SHA256
53d51749dd4b2349f3dce08c61999b8cd4dc4596808d892d0f38edd9dfcdacab

SHA512
cf773764941a1ba542e918468a2e4219b77865a2afed9c8ebc713c7e478d62ce97626347cbddeab75b1ed8c8f27472bddc185b94484d098820b3ee3d11983ba4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
6a4f20d3b5f0c9be2a88835ebc76e0bc

SHA1
450eb4d83e9c0ad97e6d927f817b96078cd1148e

SHA256
e774a7cf358bbba18ba15b0b393699842957bed757aef1bd31d8d37fe7a217b1

SHA512
9dae95b142002b5d97604061edda7da5ab6967600c2345e58e691a53155d50f11eff5a014400d5c518622c256685674bf0591e93599a3d73736719238f9bcdc2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
0cc6a5351160e5673de34648659f4b19

SHA1
eca566fdbe67ab1c570798a3e319cd08589b2ecb

SHA256
08e74d93a9c4a64a6ee68a614da3cfe9c85c9edc6e614758d918ba281e83a82c

SHA512
cfd656421a17f8d758138bf6e4d9c541f38e74a5f04c99ff86633d0bd4274148d824abfb54709c86801dc3cdddd23effa574d1e84f14c91f9ed4adfb460a423a

Download Submit