82093a5a231da8728294184efa256a9ef63a2abf6e9aaf03d0b37fc7eb889c20

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
10-06-2024 19:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9baef361c647afd160a99de42288fc63_JaffaCakes118.html
Size

54KB
MD5

9baef361c647afd160a99de42288fc63
SHA1

b1ba92f4626f27601a81a14357e7f243578c74ec
SHA256

82093a5a231da8728294184efa256a9ef63a2abf6e9aaf03d0b37fc7eb889c20
SHA512

badbf73ecc7a004cec119999fb92aa808f33eb7027af0829ed416c21e85c0a18369787056af93f5fabc9175ea3a53199a2b2ec9a81ba586df83d004806e2d3c1
SSDEEP

768:baRsJa6pBTd0Kc4rgoMNDUQ1xh5D6HUKZVNOPrVE29XXEuXu:b46pBTd0WcoPqPrVmL

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4264	msedge.exe
4264	msedge.exe
2820	msedge.exe
2820	msedge.exe
2552	identity_helper.exe
2552	identity_helper.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2820 wrote to memory of 2756	2820	msedge.exe	81
PID 2820 wrote to memory of 2756	2820	msedge.exe	81
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 3508	2820	msedge.exe	82
PID 2820 wrote to memory of 4264	2820	msedge.exe	83
PID 2820 wrote to memory of 4264	2820	msedge.exe	83
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84
PID 2820 wrote to memory of 4360	2820	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9baef361c647afd160a99de42288fc63_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffee1a946f8,0x7ffee1a94708,0x7ffee1a94718
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2016 /prefetch:2
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2896 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4128 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5208 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,10384182039241925099,9034251826734818583,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1048 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4484

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4324

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3152

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c9c4c494f8fba32d95ba2125f00586a3

SHA1
8a600205528aef7953144f1cf6f7a5115e3611de

SHA256
a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b

SHA512
9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dc6fc5e708279a3310fe55d9c44743d

SHA1
a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2

SHA256
a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8

SHA512
5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
e8aaf3d9e512549ecef7a7dc82c81536

SHA1
0f8eed662a3e9dbb41eb8a9f78d69e28cb30ec58

SHA256
416ab09e0096f2350f723ae71f98787313489802736b1c383ff3e74e42a6d186

SHA512
a179ddec740805ac6051157b617a3446c09bd80032ff64c296bd9d7067da460db07572a3eaf74200f56f5534d688cc1b60c6603eb55da4d44369e3120512321f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
b4ddb9966136c94528fc1379c17459af

SHA1
f53041d8edc4abbdb219664651124b2f51cc2ea9

SHA256
a16703c28ba270b86fd3308eee1825121437241ada603dc24d39dcd2d0222ca4

SHA512
c9f18edda68b4b7ea06724e7225b51583873430cafd0368722538c82eab7d601f54a11a39c146c1f14449d85928ed19fd4174b0e219aa459439c723447138990

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1ebfdca85361db95dcabd6d4c42793a4

SHA1
18d6578d67bd17ca07fc3063a8cb6bff4ee5b0f4

SHA256
c1065235ce69118aa629ed1650843f4994d925f3b5c1cf874d3d09dc5eaefc8a

SHA512
dfcf223dd4974d504cde18fdcb740f5607139115dc6c720c429b8361864f4ba8e7b63a3e3e0d52672fc92b3ef9ae56d32637fb13d8f1c4de8d319b7b275c4437

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
422119bbbf9a731e5ecbc7b64f0cf4b9

SHA1
c8f0afcdf279a46b3cc10c24f4cc80ec86ba08d8

SHA256
3eb83ece435f4046e7cb9341613dce1fd06db5c83ac6ec2e549f18199439762d

SHA512
fcb3ed921ec7a5b0b5600e468e6d31b0c92f30d7f22c09057abc34a5fdb72bdb1d1b289ec156294ddc5ae15ef59353f085d343bf05e480d82e388879a25f1e67

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
c0c85aeef487d79ffb000d876e8c96a3

SHA1
d3a81286a38d421f8f47fb8519f959f6a03dd2fe

SHA256
50470c951fac3e21ebdd54aec5a47b24eb3abb08569bc5d96b177412cf77fdba

SHA512
fff16f7f47845955a00946ee414619ec677eee46d110333d4b1b503958c2c05d9385836c85e6f849b9ae21758edd7a8b1fc059c549653ddeaa40e77017d92452

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3d0314f8158ba75a2d24e4e93a4e77f1

SHA1
523cc7e21c87fd93e2f85be8c5cad0668b7569df

SHA256
df85e5579d88c1f05ab2388132f18a248870c4f65829940ca4c3aa943b8982f1

SHA512
7daafe7d30ef5b7200a53d884e1abf127a8f8a364cea856371cd07a9078b3a186d852165651749d93b7dae3e0b05a180a03e9773e17683f63bc6f98d41e86b0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
c1f1f56e16118572b82f4940e477df20

SHA1
5aa8bb3638b180a6f04fc2628930de20f5485db1

SHA256
93b05f677ce360913f8a954c2c42cb9d447260655b3ba4eba9d2338818e30c07

SHA512
b101b95e9038c53ad2a70eca5e7b0935aeb81a914330d87c89115f174e7f0f49c5d562e43eacfdfbbe4c59b24c2d482304c58c4c79067b13a2a6ff9d3358eb21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57d2e0.TMP

Filesize
203B

MD5
54d82d357ed846d4217a305354589826

SHA1
025d06a205a8fa0999becc888e1bcdd520995268

SHA256
7c93837dc129c697bdfe9def95a49211cc2be7d16465b57d267b7b3100d78676

SHA512
018b3ab2718d9cffe76c18099dee188e28e9963934c229892b255fedb26c658d506dc58f802aafac11083ebe200ca64026f1d1689168d673cb97ea519bf3a0a1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
b462b427036c229fcffa54ec15d93307

SHA1
768a949b1af72fedfc21271d2b10cde04db24897

SHA256
739e16a037ed316ae85b08872d32bad8ab40fa4529246df9fa8c92c9abd3532f

SHA512
463d9ce9b90a67ed355f72d0ba88fc1dc413ee76dc656c78e91e36d333479d02d219dd856a52b30c169b5355dce1b2f18d1dd671a02cffe627300f7cacfc028a

Download Submit