74be5bc34be4e546914f9c3808b73eb08529cdccf268266902766203f5db8990

Analysis

max time kernel
145s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
02-05-2024 03:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0d4e620ca311e4df53b748161d613b30_JaffaCakes118.html
Size

175KB
MD5

0d4e620ca311e4df53b748161d613b30
SHA1

52b54e73f207d7d91355e120f60d124d577a1fd9
SHA256

74be5bc34be4e546914f9c3808b73eb08529cdccf268266902766203f5db8990
SHA512

31364a3c179aa03b78444df12483bfc9a1bc81318067329d5fa31c6ab1c0438d7ff4df16b92f6fc166bede13c713b8a99f767e3aee9b419d14a10fdea8a4bf02
SSDEEP

1536:Sqtz8hd8Wu8pI8Cd8hd8dQg0H//3oS3AGNkFpYfBCJisu+aeTH+WK/Lf1/hmnVSV:SOoT3A/FMBCJiIm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1872	msedge.exe
1872	msedge.exe
2260	msedge.exe
2260	msedge.exe
2316	identity_helper.exe
2316	identity_helper.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2260 wrote to memory of 1504	2260	msedge.exe	81
PID 2260 wrote to memory of 1504	2260	msedge.exe	81
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 2452	2260	msedge.exe	82
PID 2260 wrote to memory of 1872	2260	msedge.exe	83
PID 2260 wrote to memory of 1872	2260	msedge.exe	83
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84
PID 2260 wrote to memory of 3556	2260	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0d4e620ca311e4df53b748161d613b30_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc76fa46f8,0x7ffc76fa4708,0x7ffc76fa4718
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2868 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5320 /prefetch:1
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5600 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5600 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2208,1726092937692729926,5969417929927426033,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3084

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1776

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3552

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2216

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
537815e7cc5c694912ac0308147852e4

SHA1
2ccdd9d9dc637db5462fe8119c0df261146c363c

SHA256
b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f

SHA512
63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8b167567021ccb1a9fdf073fa9112ef0

SHA1
3baf293fbfaa7c1e7cdacb5f2975737f4ef69898

SHA256
26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513

SHA512
726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
6a847f4361e06b7c5a43d3a3571ac19d

SHA1
c2326affa57da05c2ee398bf97283ac7cd2d1a0c

SHA256
4b5797f9abcceeb6c0a39feaf331c667089a511b8f77ed2e1cdbd676fd51f5a2

SHA512
e34c92c418e067f9ae19b06b544830517c2d26b8c03795fa7a8e2599a23df580083a673ddf323686ba9b0d73a7b9bd36707c55119aaafd775b754cbd396abdea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
af26f13ecc3b39c790fbf12a96eb5537

SHA1
192c618d66dd7f806c6227400726b8f9cbe436fe

SHA256
a7ef09b18996afaa14c4b6a2a7d64074c8783e759315200f1b1dc740f9c590d5

SHA512
3fda697f0d35b0fd653482649c12017173157569351d7d9e6efc44fd5650be17409ff37eca79653a78bcca040a37ce82ebf94ac6b853bfc768e765ddf4d25452

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
86e72eb34d8cc5f145bc66dfde37119b

SHA1
a56577f2906958671ceb9af7aef72d58d6c1cee4

SHA256
5ca1e07da865e80e730cc7432b0caf00b98a48a1d1cc11efb6b668b5b3619978

SHA512
d835827770c5a67b464d01735097173e7724da2a519ace832873a4471ba3c3589ad5c6d1aa2588db0adfee88778bbbf549ddcd45015bcdd042ad117c803652c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
4f23b7850c85da9356edb50b69ca30cf

SHA1
8e9c26e0ba0c73123263f0e408da422393fe7aa4

SHA256
a3444bee93f52c7147881ee39a676adc0eb643f54b8fb9bd4b7fbd1b3556d45c

SHA512
29a6a3df59f9a33457bb63185bd47f5fbb4c9731ce5356d9526daec7551b5df186a63b0549cef4bf8a360b8e1ea57c719adc1014f06f3596493cd0d96b068fab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eccebf62-ffb7-4a1e-a57f-a8cec94aa551.tmp

Filesize
2KB

MD5
d3a3b1b16524a1c4a10d1920131ca8f5

SHA1
96a6ffc82b48932a1ea9d617f62b319d7b61a3a8

SHA256
e473484d24080ae8bc7cb3f95ade2d5219a0fbeca2a925be37f0b9b2ed954af7

SHA512
ed68c8b16d819b9148f64a5ef1178f54b1f4ad0b9868d099b14c54d2bf675e4305d94b4b09836f8d825ae21df8ecc5a5e0fa7a4fbc0ef2d3168179c1d085fde3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d723641dbef6beb66c7e3a98cafcdd11

SHA1
46b8965d5047a2fb320ab2c547d8f54186bf6548

SHA256
84941802fdf221367121dc0a25421e861dec27f709c5f93389444fe01e3f60d6

SHA512
479f241e0358bc30f150d10f35c41b4e133c753000a4bbe1e57950363182b2425bc54612ac7294c794e255591f6cffd6979f6a9c51e4fc99d23f758558cdc840

Download Submit