47b0c06d92d86a9e94a6a40d9c219b4042710665ea37f4b3ec01f976f0d0fdf0

Analysis

max time kernel
142s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 06:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8d2c7a0253faadd98a2254074b9264bc_JaffaCakes118.html
Size

26KB
MD5

8d2c7a0253faadd98a2254074b9264bc
SHA1

c9c0527c40d843fb5a2c6c082d05f628acd3c5e3
SHA256

47b0c06d92d86a9e94a6a40d9c219b4042710665ea37f4b3ec01f976f0d0fdf0
SHA512

2d9f85c20eaaa1169b028ef7818542f642f15eddde16d9fd3d452dd22b4aed509f1d70055966ea2e057593052abec9b2d6705b5dc4f495f6d5e36fd5c7a29d69
SSDEEP

768:0asQP1XwA/uv8JngJAjf1HG45EKYCUly0Bs3:0aswRwA/uvWngJAjf1HG4CKYFhBs3

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2684	msedge.exe
2684	msedge.exe
4796	msedge.exe
4796	msedge.exe
4464	identity_helper.exe
4464	identity_helper.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4796 wrote to memory of 3156	4796	msedge.exe	84
PID 4796 wrote to memory of 3156	4796	msedge.exe	84
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 1788	4796	msedge.exe	85
PID 4796 wrote to memory of 2684	4796	msedge.exe	86
PID 4796 wrote to memory of 2684	4796	msedge.exe	86
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87
PID 4796 wrote to memory of 4344	4796	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8d2c7a0253faadd98a2254074b9264bc_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9f17846f8,0x7ff9f1784708,0x7ff9f1784718
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1904 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,4290173156727353746,18363929983310023592,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5968 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3044

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2228

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:220

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
537815e7cc5c694912ac0308147852e4

SHA1
2ccdd9d9dc637db5462fe8119c0df261146c363c

SHA256
b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f

SHA512
63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8b167567021ccb1a9fdf073fa9112ef0

SHA1
3baf293fbfaa7c1e7cdacb5f2975737f4ef69898

SHA256
26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513

SHA512
726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
d99f03abc109434a67730446f885887b

SHA1
7691a4c946d3b6868ece4ef190e051c3339cc327

SHA256
f43e478ec60a688be1586f49a498af50cb38a385ea1aa1a5c1e7d8ae8ad0f52f

SHA512
43d850f679c50295b358353d11204bed57e4b9377d346dfd96836579a19e7892f2af25e3505fb856ad65fac5d53f78b25387140333dc7d6d7e33543828fe6d72

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
412B

MD5
574207ee1a32ecdac542eb4a79bcd1ee

SHA1
c4e237b0c853b6752f727d9e94e29996c66eff57

SHA256
ca33a16884ea71007e408d49c59cdbb56fdc2f3bb015b518c09019155f9c3fd1

SHA512
42df8551cc1886a925c8f353e422f559d08db2eb6633d25143f8820fc72bf6accfbd47919ea20a451d33369bb10849e0136346c80e3ed61feb6fbda614b0fcef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
673B

MD5
d2b2ae59c68ef4611d4f4bba1462000a

SHA1
ad7c72d57985bc26e94ff1517bca6628870feddf

SHA256
d582074eae9d5e0a62a77f0f971b891c651294456ac7a07ec7954516ef19f597

SHA512
013debbca5d8b79f08cf80c79efec96fded9faae512be2016fbf5aa106a8f1df2f3cb8a366def25c97f57d0a732ef5bbd775cb44a5f5c908d02ea68fb0db018e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
869d3dc896af09914a0a60ec57958d1b

SHA1
1275e38eb369c1d3a24420fce3463c7d7db85876

SHA256
9b1ea682d92fc9ede3b68aa189358d2c9727d38170bf287c2440842863872b89

SHA512
72ab9b3d78d582b2558a1cb9b7204545fd986f9d5edbe4206567dc409a05bbbd6a69d274ae396e27c995e2b2864476261813d632332952bb57b0d7b85d904009

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
37041da132c3569907f53e3c44800f06

SHA1
ae0b1eac13c59c5438cfbd332982cfc55e3afe3d

SHA256
7d6f7b4c0cf9c1f4bcce16586875b648710d0e33f7c33304112d946524db55c1

SHA512
113124333a5fba8f7f127c046b402a0306c9d72e40291343da9bdd4d47c14a36c1ea9be51d97e1e98d3f1a7253fb20b3901433dec6437bfa245c529ef116e51c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
704B

MD5
bd0077785076a94b6cd74c0574b9ef33

SHA1
c101c0abe3c3fd73e8f05129442096d827b5461a

SHA256
882c9e531b8652dfe04863b9561880333b28042b9143fec895efe3918272f781

SHA512
5cc7bb4da42c1e4aa9bd96501fc01de9493bb3b83b87fb8508b0da8f500ad1fd6dd5b198cca721e70d872cc01c89319b9d99a52f92e0077bba81e8ffd6424685

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
842a2971af0a2004efe1eeb9b3756093

SHA1
f2240dd13af35e4a1cbb30b614f54291835aa3d4

SHA256
2de095a36c0a91d321df98ac2576d8eb4e266def5fae89e8839025f4886bfe07

SHA512
dda4877c427ab7bb196f096b6f2a028db3bdb333020c9f3b7e99d8846089eef29f33ae21c90cac71dad88a64dc10cb12e995644bfc74a24c9a682c9e23e2f711

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58537a.TMP

Filesize
203B

MD5
d9732199573bf53ed1a0e7482dfe1950

SHA1
fa9cb5398abed8c1e85d5b9a8e4d6508e7517209

SHA256
d021217b8bf90df99cff6341b9215dd94fcb891aadf17c7b954c0da25f40f38c

SHA512
e44de8f1bb5b1cb7317d646c1ccab53f6dc51e4fb87af7896695298d6149d9485ce5cc104ede21e6b8abe42931683a3be995a08da4263e56ebba2c90add5b3d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e2a5673b-e872-4ce9-8c0f-e3feac71b37e.tmp

Filesize
6KB

MD5
0b5fa54891af53f1b0df6cf768f21f92

SHA1
06dbab266c8994d90ece51a52447eecc0d1a1d59

SHA256
1a2f87d3b6a6341a843dabbd011c3802d86e209ec7fe1b8f768b3441c971f26a

SHA512
7342c9d9d2d251fce0755e1e5a7ccb4c5cfd60a5cd85ef92c4e4fc6b2885e9c72557fabf4e0e8f75775a6f0e2d4a249164fc2fb1254bebc941227500fa1166bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
bfd8013ad7858b3cf14c2b7505afeaed

SHA1
7998a0d28628ba975bbfb24bad3fbec1d2750449

SHA256
a898d4f7fa0426aca13861b10681079998f29eaa5440d12352e92e1623c95e5a

SHA512
a2c2e3df7cff9cc670b481d9a0a5eaabbbae2326cfda32c53e014d533e3524318a96534084437fbab1213f748f9d40f80cf6ff3cd917561f59faea9ca1ace1f1

Download Submit