7c94807a88e61c450e609f3014af861381938207adc077e40b88990600b29fb9

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
20-01-2025 09:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_e2966c36a3e9c414b4f46862a82d11c0.html
Size

15KB
MD5

e2966c36a3e9c414b4f46862a82d11c0
SHA1

11a08edac5e4ff013c05894954e78ed3fcb31866
SHA256

7c94807a88e61c450e609f3014af861381938207adc077e40b88990600b29fb9
SHA512

4fd56613e4de84bf95a792ca29001ba984e1ed17df4d0dd258a151bf6f4e089b8d5c4e5c2c2f274d8daa4bb80b9fb70288b5f0d4d6fb8191cb9596af5eaee933
SSDEEP

192:C1f83pf7qkWCVLy2j7L0n7+nGd9gmGRw5XnSQsW:Cf83pfHWoE+nGjgmGCxSe

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4548	msedge.exe
4548	msedge.exe
4496	msedge.exe
4496	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4496 wrote to memory of 2788	4496	msedge.exe	82
PID 4496 wrote to memory of 2788	4496	msedge.exe	82
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4668	4496	msedge.exe	83
PID 4496 wrote to memory of 4548	4496	msedge.exe	84
PID 4496 wrote to memory of 4548	4496	msedge.exe	84
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85
PID 4496 wrote to memory of 4596	4496	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2966c36a3e9c414b4f46862a82d11c0.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9e4f646f8,0x7ff9e4f64708,0x7ff9e4f64718
  2⤵
  PID:2788
- - C:\Windows\system32\WerFault.exe
    C:\Windows\system32\WerFault.exe -u -p 2788 -s 684
    3⤵
    PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,8120461638871416921,543510787861743131,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,8120461638871416921,543510787861743131,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,8120461638871416921,543510787861743131,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2920 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8120461638871416921,543510787861743131,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8120461638871416921,543510787861743131,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8120461638871416921,543510787861743131,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4648 /prefetch:1
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,8120461638871416921,543510787861743131,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=12252 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1608

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3220

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:540

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fab8d8d865e33fe195732aa7dcb91c30

SHA1
2637e832f38acc70af3e511f5eba80fbd7461f2c

SHA256
1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea

SHA512
39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
36988ca14952e1848e81a959880ea217

SHA1
a0482ef725657760502c2d1a5abe0bb37aebaadb

SHA256
d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6

SHA512
d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

Filesize
77KB

MD5
f0f9cadbf5ff8c83fa37adcda0d11c37

SHA1
27ec268304d3d0c071afd774a96903c3840c0968

SHA256
d6fe7893a9f18d662bde5f97b0d1033b13c084d94cbcbf6712bd73179447a736

SHA512
4d17e13007a0221e86bb47e201d6918d147a8cc3ae08e1c82f93a30ef8d8db2d12d6c5f21b1055810d1c294c5acf5546ecd926df48f8c09c81c1323639f4561f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000048

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000049

Filesize
77KB

MD5
2fc386efcb6f30ad17932d5caee4b6a3

SHA1
a6aafb780d28ce35135ecdbee0db3ce9bf00104e

SHA256
cbba3baf8789dd75e9a746b775989bfb8db2caadcb166bd9a3573f82a523abd4

SHA512
c9e1e90efc377230144277d8a16ff96b97a9d47067b62ea4a1a0b5b4843a95d4683d58dd648b2635c90112e1067492ecfd32e80e0fccfebecf4c157adc20965f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000063

Filesize
77KB

MD5
f18d050fa3041f81e1d16cd6172d5e33

SHA1
060a904214430d286aa1f0d28cabb6ea6284601e

SHA256
e471e35f4599df578ae511edbb7655db353a532e19cfc1714beedbe3bddc6003

SHA512
a17c8fc3c21851d2f4b23453f0b63fac33f30fd94d4371ea8b46972bcb0ff182348e13f0ca661cfe32138dcf0750c99cbdb7738f8e69de955c020aef2c40286c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000af

Filesize
77KB

MD5
46ec3af7e68a63961b4ffe4a2659f344

SHA1
553f08a5033df0623824117e8af38589bcead34b

SHA256
8bca59aa3e8de5553f9daaea45273c89e7e38cd245357181d13dd6c595a2c927

SHA512
7e0c70a92c4674bdbee1bb0685f376a0ab9027508fc68f4d27f264df39a6dbca6bddceda8d2c42f91c65d43714d206dbc4de7b9e939a9b394339847ea833d675

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000199

Filesize
77KB

MD5
ca40331415b879056cbea30eed06e9d1

SHA1
fe128590a37c8ade8d054c5a3e2504b1a775145f

SHA256
c135d547e6ee039683664019a1d433f5fde416e40ef3565b9d8216f18dfab069

SHA512
2193acedd3768c740ef0a534cb662bb67f504e2c4080fdaa0f97ff09018c70e84d173848dbead6d106c3d7914bec9bb29160351e103a21dd72630c658c8c3869

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00021b

Filesize
77KB

MD5
716807594ead5598fed9151af5e27798

SHA1
64c6f1884d538fe6f906b1c5e8f8ed0d9dbc8100

SHA256
500bcc60ee7cd8fcadc1ae9095c4b7441e5d74e8d4733eb8a8969c5f630f0dde

SHA512
4d4c2f3074a60224750d51b809ef6b9557ae7f4a5d785792db07efc6edac4349fbcb873e466975c939f1accd0f721027c9b3bf76475b9a7df89cf2d19f9c68f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0002e7

Filesize
73KB

MD5
9b7e1d2c81b7c69e1876de1cee79c20b

SHA1
40d58b6e62c375c859820faa2f06e3df942a3608

SHA256
02f8a0aad761c9d53d9bdf64621aceb863c1ac9c3c10b6a980133f08d0d91835

SHA512
3eff5d6962958cc66d67674675914f1a758adb3ba59e93edef683eeab2cb4daf601825a55f0218bc121c4f97b862a8a74e92e8d52bf49e15e0d03ff63e48cf2e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0003bb

Filesize
73KB

MD5
cda788b1744b8e5f33a1c08c08e1ddf6

SHA1
202af0fbf2c08877510f36eac859cf109c264ba0

SHA256
98935155df65559a1eabf57d1c1b00b7e577bafdf85e73372c8573b7ca3d22e4

SHA512
11609b831cbf226ea8ae8d2de3b5ff775a5a5dccf2a817c75cac4a83c491926187114a59454c30ce49a158ee1cd28f89f0834f900c257db8bb13b09270c2a54a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5d1960d8536b0ee0_0

Filesize
207B

MD5
2b60ab7e2908af0ada294cecc2b322a4

SHA1
c02ea62c63cbd7c54027b14836c29a8d45a935bc

SHA256
7c93f9089963aaaad2261ad91cfa33315f6d12cfc29578f4f28108e41356025e

SHA512
a2270b41c14729b073c601b8eaaad2d1bc40879b98736054a7e9e2bec89d9d80453b39c206fcca535fbeffcbf44d37c1498378550afab080c9b7258943f2c933

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
338df135b4247e97c3e2e1a50c1e081d

SHA1
53d77e7acef58f2601bf3d1709d59d9dfba0d5e9

SHA256
e072e0c67b3c71a03dae32a08d14543213a36a43f02ee00e6b43239cb9e81f37

SHA512
126a56156bba706eb92acbe384d8367e1f4b4238ac8d03366df345684577d7ea30432666a8fa5ebeb4725a7e1c4c39419e51abe3887cfdf27c5afc2c048aadf8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
43b493e0af8ced4de9b706d01783e475

SHA1
fc127ce775ce327559cdc8c344e4a29f291e0e39

SHA256
703ad2af3bc7f9583df2535bab3baa22c379d320d5c1876cd79b1771ad57aeaf

SHA512
a2b8a0221ffb261feb5ba9346681ee5fcf02ccc0248d0a4edf21f19228683b8f521f2a4b4ee33861ad77f2d78793d6732e1237fb19f247d9c4920487ad040e7a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4c7b25e426f7ecfc83b19ae4739fe3ca

SHA1
dba55dc97f7b704137a53953f221f72f5b107844

SHA256
be77b0a63449b28ed68fee5e73e1f37fcaf6f05206947a2f1744e338a55f67d6

SHA512
e497c4527e86ddc2de390e55ae96ac62862e242dfff1500138403f01b1cbe3853dcc680af508fb57de90cd9571b84bc7183d239f169156e507459cbbf80b7f89

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
ac2c73a9e802ac55304e08435cda5bd6

SHA1
fd1401fa2848c420879db072a3d46e7fd2a1ba79

SHA256
a866d8524c18abdfee74968897a2bcbfd542cf8203654f24a4956c2cb56dfc72

SHA512
aac4bd5eb9d420288d396930f3036ba61eb66454d8f0bd2deef9f440fa5fa19847fdad4cfc07babf2ac63ad5793206d6fed4cd9ca2030d9cb49ee56dcab23020

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
327b46eed348fda2813953e5a5aa56fe

SHA1
4760532ff3ca6b06c89ecaaac1020a90eec548c2

SHA256
2527905bf7264fc077d4e1a5e764b24c710595a72b315c15e3343680889f7434

SHA512
c5b3f259e68ff3193d87546c9cf60e50839c76ba0875e147d8224846a1be77ded2ad1ccf9363f9ea6d5de356baa07a0ad946dd7465515786a71e72a76c96a30c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
1acb9969c5c8c6c7cf2bccb7a7bbea93

SHA1
98694b24af11dee19e9e2a6480685134f0ee374a

SHA256
5354c6e34d0664687ff00d6e49e1de739ccc288e71361b72f754b4d1fed85165

SHA512
20427c074fbe2548d4ab8c8d71b2abfc0611db98f5946d7a311ba4835d71ce09b0a79219c5549bf093964bdada56118f0e53897d04738709eb6ca9b7f89d13f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
701B

MD5
3109dff9790e4bf2e57d00693d754b4c

SHA1
2d113af335466f3cf6f7d1480a94f0b9a8318856

SHA256
b8097684a5ff7e0154fff6c501343bbb44d1b8cfed3e038038f2326a1634e40e

SHA512
62b9e29717767fc1ad064957efdd4ef5098a1945d0887fc4450a188e110f8ccb5f6042187d917e845b02f742f021f80054f37d4e438f7839f4d6883e9e6d56b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
ecb1b8e1bd9e7bc41b9abd6fc06b95d7

SHA1
984f1075f6b4a38dc8b767080967edd57e45f7ec

SHA256
0db53fe83f6750c1113f6e5e77298e9d1ed7f4273854d8b52a396b72dd5ca049

SHA512
c2eccf0fa2e2df29b510543014f12fa76b991977ddac79f1eb4f709a195abe04714a68751218abd1a3871a3dc978500c26d0447cc5884a85dbd361841fc91af8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
703B

MD5
79c3f256a135190b20f0998659af5e05

SHA1
b9b5b261a79c135613d57d9edae72fc9c94c895c

SHA256
d3200b21aaabf8cece660daf863bb6c0ecbe5deef7818690826d56637273dafe

SHA512
9ef1f04a5446c8e855cad1f036571565f4019a0cb5fadb1aa2ce344dff17e1e71b83a69212972d822671686e4c25308a8f6abb77f5f1340e05a7617164696c35

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
b6f2a391fabd29df37173f171e1aacea

SHA1
ec1ad86d1fd22e4d7e1aca5538fa3d720bac8994

SHA256
23e42f37fcadd990840f7662955fb5413deef2fb948d23d333249b354657453f

SHA512
97761c9b85d4b4bc0718821cc4575703b4b5eca58943c159408524c650e789b57c3d6ce3ef1d7b6388eb42ee86bda07d01c3b1457bb4639168d825da655393b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
0048b047e24e89133748b3b62f322552

SHA1
360f46a48394fae47f735dfe2b1a38b2762138fd

SHA256
f6eaec1632602cbc1a62e0de41a1d1c7b695a0b820fb18ab4b2ce911be79b76d

SHA512
b830e3520c90386d66e84a06cc464831b654e4fd9f3f977eaa02799932ed28d4b0f932f55b9364cd16f2a4211e3f0d540083ccdbd59dfe57b98abec209ecd7c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
e6888540c00378f9cdc1edb46d8882e6

SHA1
abdf4cf549b1ed9020eb9bf4e4c25a182e46eb32

SHA256
a35faaa2f4e360ff3d99f197ffd590a0e32fe2617454655a7ff35a88c6d60c53

SHA512
a0a24a4f6d36f72673f26832e1bd8b4231cc85509df783f6e433585f2c8e903b0902b3ba6da6c3d0ce57b9e39f2a2ade9ce5911a6cc7efe28b7d07a04afc73e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
a5cc897e7e0433789bb596f799b31272

SHA1
90e5a97c352a775cdd2c932ccaa5a3c61b873a63

SHA256
e70876aef973ace91c16c6a601d37513c6893b9dabb6bbe70722e7221305ddc2

SHA512
9740859a813007f2c81d7544ab60dc591e493f86f140f0a39317742cdb65649d4f323c110a00fc0a4fff6e783f0ca120412986dc9b27818241e4337adf9fb86e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
700c82a3bda2fac922ac209fb1231d44

SHA1
c3742899f6bc07fd311fafb6a1f8414e7b4b4ea6

SHA256
9c1dd75c33d9c2ee83d93beb7505f4c01bcc4f9c83738aae50a708e3a478cb16

SHA512
2817575b40d11db44f22ad54292fca10cf490010f7426587f07c89b448cd8c2bcdc70e5686219d0636fb81c84849365200b66ca3c64f66cc7d44de440610d2e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
671aefaf4a680a3238610e6f836162ac

SHA1
8dd66b741803944404b123266bae5133b815080a

SHA256
aaf94f90f2d19cd4c11356d48517497610eb8f9acd90a6f6fec603ded26fee67

SHA512
67552920c7b35257772270d7c77e2be6acfa013cb13a50ed76b27780f50038cb42efb8a5de8135c0c0e037d69d4731b7dabdc5567a8a9f5c7c2e542b03187619

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe585222.TMP

Filesize
538B

MD5
31a6921a9837059c6780cef84ef46214

SHA1
c7e8a480b059ced5b617ba720c4158ee94132ca0

SHA256
5f449ef2e8842dc5092c06460269257d135bafa86763a5a7faea6b5d341554b2

SHA512
09c016972ddd505f7f88e8cc518bcfe5abe66430d6e8ca987a748c09677ad3d6d6c5d30d81509fcdfa10dbba04d2671e802fe12666b463ed537798d138b9233c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
859eb1b4d6d7e325a839b2a9439eecdc

SHA1
9071a5225ecb30f61c970b1c5a4ce7a361d56f18

SHA256
e6a50105989c11a9c81926127629d0d1830ca937cf686b07b9f61f2c4f8afe4d

SHA512
3726305054eb14c60a451d1834737aea3093b6b7fa216e5d5730cb98ba760694596a47e49f038b8e5aca9ea26a655d5aa8f95cb66cc819db619d137508342f8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
0e1bf801f87d847357bdfc3dad9e8f68

SHA1
f16515abb7fcd38e68276bbaeb79324e958de045

SHA256
9f93de58d00d9061b6576ae692a3e0be56a088d34578859a35814d3ef4a8e320

SHA512
c6707ffc170e07f2838708e727dc3d7e9700a8a59eebb0825bd848066b4e8207912e08be7541de569bda5d8839534b354b2d37bb5cbfe525ccdd792c211b2bca

Download Submit