350e5f664a30301164497dbd1cc18f47016eaf2034b16d1af16ff97afbbf1b20

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16/05/2024, 21:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4d272a7ec15d46702140d46463039480_JaffaCakes118.html
Size

35KB
MD5

4d272a7ec15d46702140d46463039480
SHA1

2efa00f38606e003b53026bbf2ff52967f7e9f12
SHA256

350e5f664a30301164497dbd1cc18f47016eaf2034b16d1af16ff97afbbf1b20
SHA512

1ebfcf1f6527c353a369fe3469d8f3d7e2fce51f886b9382a2916495f7f3b6e5e2b92147d6c68a2f29daef0b043fec0ff8e6b5dbabb0080146aeaf9051ba6bae
SSDEEP

768:0jML/pjXagPmf2FSJx/2Bh5c33FvlQGzwScgk//Bj:0jM13jFSJuE3FvlQGzwScL/t

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
824	msedge.exe
824	msedge.exe
628	msedge.exe
628	msedge.exe
3256	identity_helper.exe
3256	identity_helper.exe
4152	msedge.exe
4152	msedge.exe
4152	msedge.exe
4152	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 628 wrote to memory of 1040	628	msedge.exe	82
PID 628 wrote to memory of 1040	628	msedge.exe	82
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 2280	628	msedge.exe	83
PID 628 wrote to memory of 824	628	msedge.exe	84
PID 628 wrote to memory of 824	628	msedge.exe	84
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85
PID 628 wrote to memory of 4356	628	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\4d272a7ec15d46702140d46463039480_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd17b046f8,0x7ffd17b04708,0x7ffd17b04718
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2868 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4532 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1976,11891217747039627106,5686657633980829401,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5924 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4152

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1112

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2640

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f61fa5143fe872d1d8f1e9f8dc6544f9

SHA1
df44bab94d7388fb38c63085ec4db80cfc5eb009

SHA256
284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64

SHA512
971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
87f7abeb82600e1e640b843ad50fe0a1

SHA1
045bbada3f23fc59941bf7d0210fb160cb78ae87

SHA256
b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262

SHA512
ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
338d9e3004d95bcac0eae38918b5a129

SHA1
bc19c0c8c88e903cf2263a6b7b07360c8932983d

SHA256
8215e0b0eef62c1c7d32342ce5e27dcce05cb762b365a869f87c9f7cc82658a4

SHA512
6b5ae7a121debef6473d4156da1ec9f893d1a7e7f684c08645168d30ff177d6c2ab0cfad13151858344cbee7e6b571f6d6e767eeea4e032acb73238fad20682b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
f607fdd1785f86a12e79cbc8b32ecd0d

SHA1
7f307dc957d18cf6fbef0c768e084e7ed16a403c

SHA256
c24b23446ddbe6778caf097ad4e9370d7f231a1ba6bb14959e9eac36b92d48cd

SHA512
3d6c58fabd513616a0ef960a2a4205a6a4d99ce36c0c74d0efb6244b36c53129e2689a96d933be6f7261de10c31fd91db96aafe9791220c8928b0a8effdadc39

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
149c589be9abc1a278d88925c250c732

SHA1
af5a734df472ea1c0a3a55837203ceaf5d8b5212

SHA256
3f6480dabfe6a3d8122b9d95f6b98db10ef18650eb1d0d55ccc7558323432ff8

SHA512
df4568e31cadcc7ed2d1a6914a39849a1e65a1e0aa90e43b856e2dbde21fbff6c6dbf5c5bb165b09346f4a3f9b336e161f8166149f940775bba41e934693d2fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c93701f6c5b0e7ae5ab979167fcb030d

SHA1
a1e51b9034f169505841cab514efda64760fb892

SHA256
f7026ad0cf0e5e7fea07e77229dfc9559eb5ee756197a72dd3ca145f066b947c

SHA512
34405fc541815226252ccf02dbc26d409e2db89df33146e7f2064f38c5a2c7d982e4f6a2237c24c4b1861244a262bfb579cf26f7c642db86f6467f87f78bdb47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
11b79a52727dee6e6cfd98e97db0b038

SHA1
5c05b18c4220c091f7ec82a69b9b438d9edd7702

SHA256
5b511bcf78f3e4d687ffbc144af4e49395a6d0766824f1d1c7568bb6158c76c8

SHA512
69ec5040375d091cec2d85c39cbe8e40bd9e1bbe68e79d9f354e03f20f828f059ac99a7f765b8a6290a579b8aa16eb039988a77226d2d345d5e730440f6dd272

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b859cb001720aef632d09d62235b8ac5

SHA1
fb2f3003183913a207cde64e24c55edad7540033

SHA256
875c206fa00985de42973fd0ea489e760f179e6e7d65dcd85d8cc9eb0f0f6e2e

SHA512
d039368af93d15b147044dfff295ffc6268733aa7c6edf1f2ebdd3b8a7c3d46d38936874f4cf97842793cabeec41d0e8debab98932f171f8a644e959a6135b50

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
2e8a6248beb80de6b3935b964cc80b7b

SHA1
0494b0af1ceba5fc15c08858dd5e9b6abea866c5

SHA256
c62a819f9fb804b25e7b97db2a1a03666d3b58aced704301f63899a874d95d85

SHA512
d77844c110d122e6ce90852312a244f76ec57ab41eb16fde8b6d32df0aad3edef56190b470d0beacf5a96e06405fd75d7fc2c1ea104052f9894feea54b98ac17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
dcc9a7ffee195328b8c7b1ad0956e803

SHA1
a5c960998ae4247aadcd7d5d804c5f46e628d826

SHA256
a211e3e51505c9c30a968321462204c3018adfab9fa82994df3a8a466e051396

SHA512
337660d4117a9c682dbc50439b55b35647ba9a88e89fca4672f1a0ee75298fbc9b43d6ae42ba953bfdde4feb218223d17be085988f8fe755f94453dd44ca3063

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581b72.TMP

Filesize
1KB

MD5
6aa4db222dbfeec3a8cac09be3a52abe

SHA1
c42857c273f55caf2726e5971bb66d2537bb67cc

SHA256
a2f8f97e01da4e2b84e8e8eb3c40ddefbe4e6e5b5a6ee5326605e4db3243362e

SHA512
1e59818f7ec28e6b016e7bfed6a6f1a690c1b86fa311c3b7cb3bec9794dc9fc0f0435180955d2490bb87a3a38bd2522054291c7a5bfced0c88f3ccdc6d040487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
2f263cf9ff1982cae2361946a81e0e31

SHA1
1532957761fa855f66e6f267f7d141af629f3b35

SHA256
77fc270b0a001262bc2dd521822935c0ea5791fc1032903c8ad3919a3123b0b5

SHA512
90c90d2a237bc2d369cfa7b45d4a45aa8c5fffdda460dac58c955ba72506887a097c1098ac9c2db9b47900b417a697f5e1518f66db9f20aa1a7193a5ae9a803e

Download Submit