e7b6c800b879d4c9e61034cdcfa071fd68635a7c455bff6aa11131e280a74255

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
04-06-2024 00:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9329cfc037feb8147b70be33e359a73d_JaffaCakes118.html
Size

62KB
MD5

9329cfc037feb8147b70be33e359a73d
SHA1

759df8b4513f96f080b060f88319597eb053e113
SHA256

e7b6c800b879d4c9e61034cdcfa071fd68635a7c455bff6aa11131e280a74255
SHA512

e05c26602e6e9a9c619b649de46dda241f43ccb0a4a5999570a6177ae2b89423f0581c18b35cd05c4407849b80f2d04ca5a8b49a32bff5282a1d048006bf6ad6
SSDEEP

1536:OVZ7CDHk01YU3D3H2zA2py1SV3EVHAbcvLHeMz7TA+jvRJBNio:KCD7YJpASV3oHAbcvLHeMnTpjvRJBNio

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe
4704	msedge.exe
4704	msedge.exe
3796	identity_helper.exe
3796	identity_helper.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4704 wrote to memory of 1172	4704	msedge.exe	83
PID 4704 wrote to memory of 1172	4704	msedge.exe	83
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 2128	4704	msedge.exe	84
PID 4704 wrote to memory of 4428	4704	msedge.exe	85
PID 4704 wrote to memory of 4428	4704	msedge.exe	85
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86
PID 4704 wrote to memory of 1444	4704	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9329cfc037feb8147b70be33e359a73d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff0aba46f8,0x7fff0aba4708,0x7fff0aba4718
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,5741668499839678432,5971994479684687379,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2004,5741668499839678432,5971994479684687379,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2004,5741668499839678432,5971994479684687379,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,5741668499839678432,5971994479684687379,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,5741668499839678432,5971994479684687379,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,5741668499839678432,5971994479684687379,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2644 /prefetch:1
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,5741668499839678432,5971994479684687379,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5632 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,5741668499839678432,5971994479684687379,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5632 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,5741668499839678432,5971994479684687379,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1680 /prefetch:1
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,5741668499839678432,5971994479684687379,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1316 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,5741668499839678432,5971994479684687379,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4032 /prefetch:1
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,5741668499839678432,5971994479684687379,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5960 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,5741668499839678432,5971994479684687379,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4868 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3036

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4348

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
e25f9fed22cc3718828b141d0e069eca

SHA1
629c89dbd3717db92b50c44c805e52f01120aafd

SHA256
28459b5acbefd4acaa180e49fd71df469fbbf22dada8b0ab7edfb2fef83e9d0a

SHA512
ed8f047698b4cd5cb6693fe2dcb84542c87cb2e734ab4caa5f11c4f818cd477489790eb11ac3ac92ab65e1ef7f8054824d42be9c0125b4ca52aaf5725be07e90

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
b5c6263f278f1d28900dae5dd7797d4c

SHA1
532979d5af78addf60c68e6f98bfdc5367f7d33e

SHA256
f9e58161767485162fc0024da038c5f8c3d04afb251be1f2fa331ee2b50f6ec3

SHA512
bfe4e8de11e145b99054e38c317d6d779e5088188f9e06d911c48539eecabded7b081d4357a0ffd78931718ab14f239ec466166dd7d59a3deefcaed3e36997d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
e0a9632b9e3242ef3a0112b9ab918ea0

SHA1
bf39ad6ea948abd294ca9b908cc514c00a37b863

SHA256
d8f01355fd2f0aba512d6ac1aa3cc1fc0a86a66ade358530a164409bb024358a

SHA512
510e773899ed63723659fbda056cc224bd701643ef20bc428e385c54fbc7f377177079a14f7fbbba1c675a628a124aeed887988f109a2a8619a973622faf5e0f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
a25818f46d6a1e4115a3c5073587d594

SHA1
1e217e2a87dd725a1991165b97dd919947cdc634

SHA256
72c03160b8f5ee53c3f0a94f3b9b4919b657d85445581627b329fa0bec38fbf3

SHA512
77f1cd2e9d9553798eac175fa050e90c6cc2b24312a2396667cf365cdc4b3cd9b1491e444964d665ba09a8bbd5d6b700ede64a69bc783792b0c99bbaa31f1c21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ee3700d004eb0dd5a8a40cf1df7f1011

SHA1
de778baf658070e2ba1bc1ca24f3d9f06f19c264

SHA256
215b26edd6bd92f60d3ee3a6e6a341703d8fd5124eaf2c2bb33283f2b3f86821

SHA512
ae24448af74d6a41898195a061c75e781a65bfe832c18b9dbe699c1bcd684022d72d315992a724fde796084adc6d3aecc9f8777d4291d832f1b24b632dbe347d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
56c8453f330a102a307b31c8854e046f

SHA1
70a8f21312047a77082be4c4b94d18526a4312d5

SHA256
f9b38771d36fa45f61fa5c93f1318cae07f9f39f43b12ab13492820a6d77de5b

SHA512
66c3348e47356be25ee288535be747632c22f16bd76b360236796ce4318347c11fdd0a8060dc013b7093cf8f34b45d5039ab4bc0b549188c915f1aa219a5ec0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4cdee813c1cb5318b9c791d650a43a97

SHA1
d7c6fcb8cf5ce69ea1ed440fb97905b23820303f

SHA256
828c13e8f3d7c55c6e44db6098cade73a3d74be6a5bf35a3bbe0925694918c9e

SHA512
78d671712d4a2a6edf92f7aee3e386f7e3cd84a63ebf2e407a73f78b241d8f1dd472c3fe8a2ee7d772d21b73142694dd946f7b78fd70aff0377c8125ab8dc06d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
c99ce25b702613f774a081b38da2f44e

SHA1
c5dd029b30afc94880287e25b72e531b06d0011e

SHA256
1f52e212ab05a62da50d67af52db410a629a28f7ba7dc12f9e79e93848ccb72a

SHA512
650c21751f65baf7f7e5cfdd876ea0bdeac7cb92413cd65f9367ce44ca807f9b04a0df3da17cccc5a1fa3117aea4f1f06a290e774d9a28eb5dbe16d021783144

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57d522.TMP

Filesize
204B

MD5
c4637ea9b5cbeaa104e57428d112bb49

SHA1
6db1bb2fb45144345b1120a44a4cf85d9df03e3e

SHA256
21bf53171c0c7a3d6eb4c0d43dbcc15d09582d8a91ab00184f02f1ecc5c0fd35

SHA512
e919cccae72ecffdb7787aa19b438b16496d49b657a0804ff31935f9c2c97ebc8bf3acc94a8af198e430a43b65ce9f80259c53fed0b6a7d54691103c73f8d1b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
363d043545963f11fa7365a4d3be51f7

SHA1
1d4a1ff96ddba4c5e3daa9c9b3aab08cb0b22007

SHA256
5708538004d5a0e49c70beb5313199ed5c32a04faa1e0ff7b851a5560145675b

SHA512
dfba33aa0f6d9e80adda46ab415666daab4c98889e58da39eb6926818d53014c689a30d8d3d7b3de15fa0f05b5f7b8e53298aa74065fa76a41d5ece8e21fcf58

Download Submit