e50a3eef085eb67348384e7da1dac8445850832943fb153174438465dffb635b

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13-10-2024 21:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

423e8dcbddca0d9fd1747b994e7b4f9e_JaffaCakes118.html
Size

229KB
MD5

423e8dcbddca0d9fd1747b994e7b4f9e
SHA1

b590bc50a3f5962a6bb7cccf2fe4ad6d1a2d6cd3
SHA256

e50a3eef085eb67348384e7da1dac8445850832943fb153174438465dffb635b
SHA512

2aefcc209ff94d0f099cacb55d55aa2182a1ae38ef030f4885a2e52cb3c29028f0260673df05a8e6bf161b1cad07f30047829bf8391c34cff65a59021fc8a638
SSDEEP

6144:pZVMARznpBgoB03R6/BSwLNWSAyHX9KcN6z4Ugw5HA6:pZVMARznpyoBz1U8UnA6

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2928	msedge.exe
2928	msedge.exe
3300	msedge.exe
3300	msedge.exe
1952	identity_helper.exe
1952	identity_helper.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3300 wrote to memory of 2348	3300	msedge.exe	83
PID 3300 wrote to memory of 2348	3300	msedge.exe	83
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2060	3300	msedge.exe	84
PID 3300 wrote to memory of 2928	3300	msedge.exe	85
PID 3300 wrote to memory of 2928	3300	msedge.exe	85
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86
PID 3300 wrote to memory of 4224	3300	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\423e8dcbddca0d9fd1747b994e7b4f9e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff409f46f8,0x7fff409f4708,0x7fff409f4718
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1968 /prefetch:2
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2820 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6320 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6284 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1944,13931682910642191563,12063961782209439559,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4828 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1004

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4020

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4964

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
99afa4934d1e3c56bbce114b356e8a99

SHA1
3f0e7a1a28d9d9c06b6663df5d83a65c84d52581

SHA256
08e098bb97fd91d815469cdfd5568607a3feca61f18b6b5b9c11b531fde206c8

SHA512
76686f30ed68144cf943b80ac10b52c74eee84f197cee3c24ef7845ef44bdb5586b6e530824543deeed59417205ac0e2559808bcb46450504106ac8f4c95b9da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
443a627d539ca4eab732bad0cbe7332b

SHA1
86b18b906a1acd2a22f4b2c78ac3564c394a9569

SHA256
1e1ad9dce141f5f17ea07c7e9c2a65e707c9943f172b9134b0daf9eef25f0dc9

SHA512
923b86d75a565c91250110162ce13dd3ef3f6bdde1a83f7af235ed302d4a96b8c9ed722e2152781e699dfcb26bb98afc73f5adb298f8fd673f14c9f28b5f764d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
23KB

MD5
c6ee151c95d5bd2339c67eca774449fe

SHA1
c2de7e4a87b91ddd246fee53b8274b35fc55603a

SHA256
65edc4727e2bdb04a0ad28564af17bcf3bd7029811429804d283c8f0e186ce09

SHA512
eb04604f00aba42cffeecf266cc7dbfc096708ebe615ed2141bd422585db26a12b54f9c22041c798cb01e4c3d3e5c70fff935b0c7a508fbf61f6201c3dc678b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

Filesize
45KB

MD5
ede70f717200a59b4cb831635de913a1

SHA1
d4d6e893ac192b5df087e924ab3356852f8a7bc0

SHA256
c63fbcc69de230e4844cf735ccf668eeaf30e42126eeb464da39c2de6b0b0051

SHA512
b621bde28b90ba97c122677989d994cb5e88fd0906366af1a23ad3f9d9f3b7f2bbef95873f29100433d4068fbbf7ab798505e68deefc118097fc5f76dfc4b672

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

Filesize
144B

MD5
48dccd68ae6d02a7e0fbf55f57f9ebc7

SHA1
24b314d48aa52a5f40e0f3019ef5098e92d2e08f

SHA256
5562aaedaab52b670facd0f0d6150cb59f5395c07307ca5696ec44d2c891d9a7

SHA512
d657125723292913b7117e7f91e262d01498e3a7d28135aa1ba797e63820381d1cc82ec4ce2953f3968e7d3d288bc724de4cc2de42e690df96a39f555db19cdc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
5137ad22f5be0628d0c6f5e121955629

SHA1
1256c3ab1ec86d713f5a4c9c5fc4ffbdd5eb9591

SHA256
ff87373ecd90d41371e2430d166cd250fcd486d746c3fb098aeffe872ab69d03

SHA512
498813662fda770bbbdb587197e73a8fd554c7c5b6241f2c82c1730a89e34b8aad34b637e3c495fcabb4681be96f6989c60df5af91c1cf6cdbfcc8837db303da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
55a0ab3413608ab86199d10b9dcea564

SHA1
b0794c40b374370d247c5ee0060a2e7d078f9665

SHA256
aecef288348fc82af52aef6abfe2615f5d7c39a167bd32a4056f2cdcf82ba679

SHA512
e1c6422d3c891f7e2c7d65e501b3dd7c8c732bfea3b5e167a70ee7ad71c6f69c4c855ba49b722e228329a3e013206acc1d3452ea21ab037271034ca7663b4751

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
e946aedf7559951670de7734ea5df184

SHA1
379c7a01aee61bcd97c8de1c13a6db9aea37c0e2

SHA256
40230fcad55277342af4729e184d8187e82af2a82da942fe0ef168df69e92fef

SHA512
319778fdde09c7688f7c72721db300ac3a111925821a92619d463020d8c3bbca16ef7c3669c7368bc875b96805a76816ba692a055a4fa7f3e5e3a61fe0f1b7fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f272d8e736e851918a4c3ece2cab2102

SHA1
0bb198a41e4bacb153783c4af8e67793f403fba4

SHA256
caa2f6645b79c84b5e1ed9a0eb53c0bda8117674c97f601f83daf6f7a2bb5095

SHA512
b0a1d94784cb84173e27898f7f39a30d29cebd25b271d3e2a126198316d89c3f13af1140792bfa7faef83dd3520632853cec5cf116ffd2a1a71af8eeb116ab8e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2035db57daad737af989b17a055597b5

SHA1
29ababa300bf35fa4bd00f2a36e895bdea9bfc51

SHA256
2e4c2f1ff5194b9fd1be10f7284d22f4ba69e071e8d396d120786b3345a69365

SHA512
03acea3d8a6133852c7fca8464e4699afe5343db643dab9f540e9346c9cfdfc62e3d4b64c8ee87e40c78cc161e0f080c2275ac48d39fd26372482aeb9b9481d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
539B

MD5
849b2330b927efb4e79c78e5329b6a0e

SHA1
95b1e23fc4c524e0dfcd0e421a8da16f927ac012

SHA256
6dac59e9f33827b3920bec159431fada16252da56e2453a7ab9041cd71ab56b2

SHA512
6fea017bc647c2ce4e274388eb2f77e96064079dfb6072947bb27ce49822270da50c5f6ef76610ba5c0ab30acd8591cc2808b2157c8292361600da48194c1580

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe589006.TMP

Filesize
372B

MD5
694bf01706bcaf19acbdf3bb36d0d230

SHA1
e17dfe807763dfc3f41ee6238dd1305175d9874b

SHA256
182f8bc6cd3410b28955dcc1c2d264b711d1d232fa529650accaa3dd64dea297

SHA512
de9d00a3d684e99b50832ff495faf342785404a4d4e6bcd206477ee84cfb0e36576a6c0f98e99c6289ff620b2b097cf02a68727106cf068038f649be01a72edd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
60a6658fb5003df647cf97ee1bde65d2

SHA1
da816f47cc6a89e9e44d673e8d4e42cc57d11074

SHA256
14318629c300ab5cbe1cba7b6731b7227db9f579b862f7f179d85f975d700f95

SHA512
d751eaa3ab7746cf71511eab1b774b3d9f68b2c28c234175cd4dbce5e517b58c4558338630a0f39aa2d0fdbaa77a4f81466af3b95c40cf257a2ea187507855a4

Download Submit