ad677732afb07a02efd01bf980cfb43263cbd257522a2dba519cd95fd7344c0d

Analysis

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 13:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

7227595061402124d9de793b6f658e71_JaffaCakes118.html
Size

73KB
MD5

7227595061402124d9de793b6f658e71
SHA1

77b3bbcc042e3ba5672ff45cf46671b07c3b732c
SHA256

ad677732afb07a02efd01bf980cfb43263cbd257522a2dba519cd95fd7344c0d
SHA512

510106237f0fce26f3a416a02158c53656220134f8a470c9c570fb02e67a6151e25f3ed66d8754e61942d8c6643c68bbaf5fbf6947a865a9d9f29e2bc35fe0a2
SSDEEP

1536:SzO6MwPHZh08gJWQQHeT7ahxoC/cDG9RvncUVCcwWJ80ANwMelrv9Hi7rXAMyD5:SC6MwPQ8MfCxoC/cDG9gg8qMelrv9Hiq

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
3808	msedge.exe
3808	msedge.exe
4368	msedge.exe
4368	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4368 wrote to memory of 4516	4368	msedge.exe	83
PID 4368 wrote to memory of 4516	4368	msedge.exe	83
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 1412	4368	msedge.exe	84
PID 4368 wrote to memory of 3808	4368	msedge.exe	85
PID 4368 wrote to memory of 3808	4368	msedge.exe	85
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86
PID 4368 wrote to memory of 3360	4368	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7227595061402124d9de793b6f658e71_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbaa2846f8,0x7ffbaa284708,0x7ffbaa284718
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2928 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4072 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1716 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6568 /prefetch:1
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6540 /prefetch:1
  2⤵
  PID:664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6536 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2244,8352357885834201778,15351295969293941139,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6768 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1840

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3132

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4424

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c9c4c494f8fba32d95ba2125f00586a3

SHA1
8a600205528aef7953144f1cf6f7a5115e3611de

SHA256
a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b

SHA512
9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dc6fc5e708279a3310fe55d9c44743d

SHA1
a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2

SHA256
a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8

SHA512
5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
c4c826369cc255635e3660c73204877b

SHA1
76ca108088e847b66ecb5b82f0c649584f9efa14

SHA256
39e0bb7976e8d25cabc619678fd224a915bd5ca1974e961aa114e71c01323cd5

SHA512
3315ae99380f74a6620b94fd77fea6c835e19c9e555bb3bf2a8cdefd91e41cdeebcda3187ca5f1e9d79fc7d39debe4b5bdf6e173ed4f2c76681626be996eb7a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
744B

MD5
ba5eab3ce81a9e6dbd1bd80772da476f

SHA1
b4ae85a1d789a79184b5d0f4773e7c512963ef87

SHA256
bb2df5178eec317cade36300838ec4271709628dd6a5e5932bdeda4f86ed3f3a

SHA512
ad9f272e39bf8ba974b65811fcfbe688b934e258a567e9fd2ce4468d4ce3902217990b27094decec26d90b03f291f9d5442b38e1fb40aa0c153554c5a369f2ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
d3471665bc7cd36a0a8de7a4183765c0

SHA1
b339d43777f97bdef43678f8a9473466114f3e89

SHA256
15e1c239e7b87ed4ee4d3541027ea7631bba481e94078a87b6468f71f70ba7c8

SHA512
79f2508c3d4f1d9f5c10c2a61f1334c8008cb9c3e4e8e9936c74f0ecb3f751b89c88ab174f5f65c694a7b0e33ddc14e18ed62360b2918fa6df991174d46ce256

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
5356f0b49974b8d6caf118c25d69fa8d

SHA1
697da2047edeefb9960e3349d52ea8a5b57f3103

SHA256
433324f53697a97aea939b1117ab268a3e5a801cbc86ffd29f1b9b719e26cf1c

SHA512
6d5d1cde980b9372532b528ab5e106134c7ec744dbed36b2be98d24083ff596049bc49515e85d61e1b59637633816fb385110d8264f2f392511a958e5c2a696c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1df7ab6cfeb04559d8438a53d4198e3b

SHA1
aa62fe412eabfef7d31d2f217631ee794aeaf158

SHA256
5a6136838ac260badc7f4a9bd2e4d9e3edb56204c892f32f52fbfb09f7504178

SHA512
e4250fa6486542e6378f7ef5f8223fd2472ab9c29198cf169bc39ac310d7cf6e2a5fa2ce161580f18051207249225e577713dd85e10b53d568a7ecaded62c1ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
ba5d5ed326e24b3e38d6ddc747bf106c

SHA1
b4d5152cc0f216904efe9361410490adafa9b928

SHA256
37cabe0733645b326bb68438bbdfb9d62415cc373196208a7e4ae749a02cfcc4

SHA512
7024429ad26f039948707335ee7695efb1deb7efac1eed1c13bf6075ddf5b03777053cb117799db586952f350c3e157ab482604096300cb68693c9ebf6569ce0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0a65f5c3a45c84762763cda61c81d41a

SHA1
6186aa77ef6b72b930808fbf02781948754dfd82

SHA256
e899c0b4f9c1a30781366f6c86f9576a82acad84e3111b81c555543f9d305812

SHA512
80f5addb3063084777209fe04e03000276dabcb9317db07d9296200be408f4605eb912f44b829b49f58d93efb2b3ca2248b8b2fc8adcfc3368f709fddc56d841

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
edc59081106a592c4d6070b5d48c669f

SHA1
1e442f06903e9eb2f52346c9b4a5ca1d24f7a550

SHA256
c1f32cefbff09a3bc3867875d32ddfa62fc711583161ae4fd8501f9703d6b3fe

SHA512
30221989838fc6b2501f6b6abf27ddb242bef8256d76b6a4502816c539d2fbdaff085766fefe93512e1a9c2888d9e8941aa2eda52efa873abb6d9d126937b4e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
26f846b47a29fb1ef452087449ba9e77

SHA1
e410cf6dc2888f0bbf966b378819d128e00b393a

SHA256
374cfcdd671fc5e3889bc1ccc18d1a1ffddb0d50ab04651ebd928aebad528d37

SHA512
4f43e04a203f9137ee96cf1944015439adba787936584526d1f357c0fe1ccd0f6b9ed3aba3198c87aec421d526b99971d2a5c6056470578ee5c14b6cc8e8113a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57c469.TMP

Filesize
371B

MD5
41fccc1caf5f2fe6c4b8a2681ddc581e

SHA1
e060f62449aadedb1b59c7ca2853b1d5cf4d6a45

SHA256
a46174ec02df498a9af44a100a8782f791a25221c70e13e65aa6e79e3533501e

SHA512
bf229ae2d6f14576a2a2c28b74641d4978419de531d9dd5f06c734c0ad4be1d59b06823ec972f690cd2d39da4c0dc23360ecdcac22be2e1a29d1b3720335c104

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c4715a72-402a-4098-bddd-fc4d7f0de2f4.tmp

Filesize
11KB

MD5
7a00b988d5a3fec639ee8229d3e74eaf

SHA1
51f9869a1005250b17f5b3731e3f7189d7b0eb12

SHA256
3b4e0a8b8e5c536b39e6f1347310ffeed95243680611e0933f39f1229df3038c

SHA512
89faf00a96cdad90c1cf9b3023cd713ab976133d6591c9c8e4022bd2439c729d5aa0a39125eba6add0488c91b9f32032276a26be85b53032f1984782ee3c6e58

Download Submit