Analysis

  • max time kernel
    145s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/06/2024, 04:32

General

  • Target

    a3d433b03f9a4741f2294b5ff0fcef77_JaffaCakes118.html

  • Size

    47KB

  • MD5

    a3d433b03f9a4741f2294b5ff0fcef77

  • SHA1

    356d7b8f6c222b3760c79fe5b62d5b16e5c72130

  • SHA256

    a155238e53134f30b2ec8152295aa6bc28d29bac33e34015a3f60c1e09c43ad0

  • SHA512

    22333020b6754d44fa26c9b4ce12d37f44c3e12896e801a8668a1fdf07181b26033f6cdcda93c4757089313971030f366b74b6f8eacf44e71af54862eabbb1c9

  • SSDEEP

    768:Anw7g3j1BUKfBU/pPu6bWgjiVssR5Q9hmkW83YlKrjBQdC8U3gvnzkvBPK3tac7Y:Anw72Xj2lA95nkBkKrjBQdy3onzkvBPx

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a3d433b03f9a4741f2294b5ff0fcef77_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:756
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8554b46f8,0x7ff8554b4708,0x7ff8554b4718
      2⤵
        PID:4404
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
        2⤵
          PID:2620
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:948
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2744 /prefetch:8
          2⤵
            PID:3488
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
            2⤵
              PID:4408
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
              2⤵
                PID:720
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
                2⤵
                  PID:1116
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
                  2⤵
                    PID:3284
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
                    2⤵
                      PID:928
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1
                      2⤵
                        PID:1112
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
                        2⤵
                          PID:436
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1
                          2⤵
                            PID:1224
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6252 /prefetch:1
                            2⤵
                              PID:3584
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6416 /prefetch:1
                              2⤵
                                PID:2332
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6788 /prefetch:1
                                2⤵
                                  PID:2396
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1
                                  2⤵
                                    PID:2988
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7096 /prefetch:1
                                    2⤵
                                      PID:1048
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7284 /prefetch:1
                                      2⤵
                                        PID:2464
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1804 /prefetch:8
                                        2⤵
                                          PID:2680
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1804 /prefetch:8
                                          2⤵
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:3136
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8116 /prefetch:1
                                          2⤵
                                            PID:4572
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5364 /prefetch:1
                                            2⤵
                                              PID:4548
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7288 /prefetch:1
                                              2⤵
                                                PID:3468
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7340 /prefetch:1
                                                2⤵
                                                  PID:3860
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,10570897413184427891,8056383090489798481,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2304 /prefetch:2
                                                  2⤵
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  PID:2848
                                              • C:\Windows\System32\CompPkgSrv.exe
                                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                1⤵
                                                  PID:2124
                                                • C:\Windows\System32\CompPkgSrv.exe
                                                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                  1⤵
                                                    PID:1320

                                                  Network

                                                  MITRE ATT&CK Enterprise v15

                                                  Replay Monitor

                                                  Loading Replay Monitor...

                                                  Downloads

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                    Filesize

                                                    152B

                                                    MD5

                                                    db9081c34e133c32d02f593df88f047a

                                                    SHA1

                                                    a0da007c14fd0591091924edc44bee90456700c6

                                                    SHA256

                                                    c9cd202ebb55fe8dd3e5563948bab458e947d7ba33bc0f38c6b37ce5d0bd7c3e

                                                    SHA512

                                                    12f9809958b024571891fae646208a76f3823ae333716a5cec303e15c38281db042b7acf95bc6523b6328ac9c8644794d39a0e03d9db196f156a6ee1fb4f2744

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                    Filesize

                                                    152B

                                                    MD5

                                                    3a09f853479af373691d131247040276

                                                    SHA1

                                                    1b6f098e04da87e9cf2d3284943ec2144f36ac04

                                                    SHA256

                                                    a358de2c0eba30c70a56022c44a3775aa99ffa819cd7f42f7c45ac358b5e739f

                                                    SHA512

                                                    341cf0f363621ee02525cd398ae0d462319c6a80e05fd25d9aca44234c42a3071b51991d4cf102ac9d89561a1567cbe76dfeaad786a304bec33821ca77080016

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

                                                    Filesize

                                                    20KB

                                                    MD5

                                                    9a8e538524054f86eb73eeb00e31424a

                                                    SHA1

                                                    35ab0fff51a81aec3f1c1ca6406dd521c09893f7

                                                    SHA256

                                                    28a27c07cccf1a8e37658352320891fc286dd15482331d2012cdf5422b5dcd82

                                                    SHA512

                                                    d8bc2dec1323bf759fc4c3e2a77b64b56d3d80676aa38c7386ffc650a762ebe1633d5a802c5d71c9b485348415ae6c22951b3a5e141a2f203f7faed1620d4136

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

                                                    Filesize

                                                    85KB

                                                    MD5

                                                    6a4db7b69600c1fdace266c9411ae8ec

                                                    SHA1

                                                    d0fdf8c796cf385c7152335e5fd9bb5b23069fa6

                                                    SHA256

                                                    7d61b43d1bffb012bfd0861b8bc8e3528967a7cd2ea2338e312ec7a25b70c114

                                                    SHA512

                                                    60b7cb28b988af28fd0d7ef51f095b74104751c410e1a0b347ce93d5068bc0364c827887dde07a82ce4d384a845f65b56a38e719c64732c2511151f962e0d130

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

                                                    Filesize

                                                    60KB

                                                    MD5

                                                    bdced4c2cf63d567ffe0740f597ffd7a

                                                    SHA1

                                                    b7a2d2445d921eccd3171697bf92465c0468003b

                                                    SHA256

                                                    139e94faade83507d49f8e7dd96e89d8ccca26965c46c5b0d024fe5386585f69

                                                    SHA512

                                                    8e19aa46e309697e3d2045f1abdf689f423f018af67c5d2001fa00287f86275f43485164e07954028ba0e7286e53f0721980dbb5408798ff5fb071d69599c717

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

                                                    Filesize

                                                    53KB

                                                    MD5

                                                    adc26c333ded158cb64e33c91cdf45cc

                                                    SHA1

                                                    ed83e0de1d289023012df76884766d4b769deeae

                                                    SHA256

                                                    122d097c5dfecebcbfcf00b1eefdef5437c1385afdf97a3f45ea609d57ccbe6d

                                                    SHA512

                                                    839596f9b06030ab6752890df44cd7ffc3f095022e8271a9859a3fff5be6b2c8642def1bb888ec1092d5f73e214d9bc0095429c5d986cd281dcd301dd07062e1

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

                                                    Filesize

                                                    56KB

                                                    MD5

                                                    89f5e4568929b6fd065bdeb9f3ef7f6b

                                                    SHA1

                                                    bc63c97e2a3775ebdfcad6e1f9143734935ad404

                                                    SHA256

                                                    0b2df0e455ba27d77c0ff47e58d3c72240937fc21468e756324565d849aee686

                                                    SHA512

                                                    6de35f76656445e61f62d62a1add81264e1b09041c5bbb7f8574b1a381da6a778ad8ada9bb9f4b4b10647f1331618832cad877b7a395a3b0276fee2dbdef69aa

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

                                                    Filesize

                                                    42KB

                                                    MD5

                                                    1d982ef95b36254e42554c00b3216836

                                                    SHA1

                                                    c7e074a1bcefc10ae18f624520f0b81780b95e71

                                                    SHA256

                                                    f11ac22af306f427da8d1d4a4828b42d066dbdb70ddb407b371a3bee3b866244

                                                    SHA512

                                                    c69e202c0203739bc30011baa6d4cf034dbc4ee9833162daf178d9fbb9ee632303151fc1466ce08f31caa2b3930fc66eabb2e3dbf8259dfbb0807f7a8ff4a9a9

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                    Filesize

                                                    744B

                                                    MD5

                                                    b89d592a2203daed4d81a863e2a04ec8

                                                    SHA1

                                                    e40dd096b1a3488433c8228f7524d8b1e87393f5

                                                    SHA256

                                                    3f7cfa61f08fa8f5602d0eb57c7f0f15f52da1e5a70ad04e0606e81865b9eb6a

                                                    SHA512

                                                    0fc45829aeb3f074575ef5ccd53072e4e2f4fff2292e83ba549b94dc688d286a9c455d764fdaa75c24ae5a9e7e540e591cc54e10fc26e752d3ebaead41dc7663

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                    Filesize

                                                    2KB

                                                    MD5

                                                    5403bb9b1e22570277b133da55863978

                                                    SHA1

                                                    1a029a9ecf98b9bebc3eaae39fab495c9bb5e5c4

                                                    SHA256

                                                    f2f0e416c5db134d7bb377de7d6f0fc40f4bd7db323d5c007195e8d02051dfd7

                                                    SHA512

                                                    e27e26f227cf9edaeae95af6b6807cd1137d124740edfc27066237ee6f45c7510eb90ea8b5023c2b3c43295304061add629edb499847ffb4a80b85ce6b11c03d

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                    Filesize

                                                    2KB

                                                    MD5

                                                    4613c42370c8d4f7b4e1e743e2352ec8

                                                    SHA1

                                                    dcb962efb3d10a6fe1a191e9619b7eda096b2e2f

                                                    SHA256

                                                    5fb2a6314ac5f77f4fbf97172e4f6e0a8b182ac58ae879b8353b1423febefedf

                                                    SHA512

                                                    e9ea08dfc06f90ef771ebfeea1522f15bc2266b88580a9939d22fde91f839a40c07e2d01ff1a6bd8749d728dddec10f9b9ee2fc0e02206db37abce51388829ff

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                    Filesize

                                                    8KB

                                                    MD5

                                                    31b50605a222ce1c5a75e3cd62457053

                                                    SHA1

                                                    ead500816eaaf3a10af62adedf2ed4e5807a763e

                                                    SHA256

                                                    b66354fa4a2e360d48ab3caf4798f7b978676198e1653ea9342ebda9d108c9f0

                                                    SHA512

                                                    4a8c64799aff71b2c5438d32a876eee918d1db812c8ba4ef5ea3a87ddc0542f1f7183a0ff3d42201ca346df8c86e83374e4ee46f6bbe52e6febc5aad6bb5dcd2

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                    Filesize

                                                    8KB

                                                    MD5

                                                    8e11c886f601b4aacf1ff68881dab1f2

                                                    SHA1

                                                    d7fcc6cd2b5480adea138dd0d8fcf79bfafa4fa4

                                                    SHA256

                                                    6103f4d3bdffe7755c51a7f504238ae502a4b138c741f1d9fc01ea4163b46746

                                                    SHA512

                                                    8c1e01f22e5890c15d24122d66e922a952b3541177f84a7342b8b0bf22d1dcefc52b7f0237ddcb95614e14939d486b3cbd9c0f928439120644cb0c3b316fe215

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                    Filesize

                                                    6KB

                                                    MD5

                                                    8cbac84d63f267b9bd6f152f42a3b034

                                                    SHA1

                                                    bb707b4ebaafd211471ba536ddd9816783fa55e2

                                                    SHA256

                                                    e9e79b0ff947acec387276b15bbd0db8baaa72f9c1d67559c901b93a0d1476c2

                                                    SHA512

                                                    0e66541a3c8dff4f8d994cd3375b6b8fb3b9e3961b80a242c73ae80d6e808dfeba044617bc0c53fb9aa83fad5b73c8b5d5f4ffeef1453a2365b45d34c19fde63

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                    Filesize

                                                    16B

                                                    MD5

                                                    6752a1d65b201c13b62ea44016eb221f

                                                    SHA1

                                                    58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                    SHA256

                                                    0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                    SHA512

                                                    9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                    Filesize

                                                    11KB

                                                    MD5

                                                    f0aedf8a179b0d0c6c6fcdf24df194cb

                                                    SHA1

                                                    ee179d2303d345f03b50b9bf96be7f564138df30

                                                    SHA256

                                                    b84cb967cd96bad2bf3d33618636b1037b9d4dbbf31bc4503edcc31c30f76d50

                                                    SHA512

                                                    01d6feef60e66dda31baa21304f5494935926a89c7cbd8588a91997416ac6f44d7ef6ce6374070c51e28cc933ed560b3bd07dab845d40c90a3f2f567b558fd6c