592726873ce11f3929a9d8ec14ad0cd109d849d48df76ccd5d8c81b392221bf4

Analysis

max time kernel
146s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
08/05/2024, 17:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

25f756cffba48191ef14b204f3989ccc_JaffaCakes118.html
Size

134KB
MD5

25f756cffba48191ef14b204f3989ccc
SHA1

abd807eaf1f6437541030c33eb01ed0a63295bd4
SHA256

592726873ce11f3929a9d8ec14ad0cd109d849d48df76ccd5d8c81b392221bf4
SHA512

8241076ae1d75a5b1ef240ba84f65340aef6a31d6eaeba3c3354188758311a10bfd10331a27a3d69f533a1ea63d147013efdec4fc778cebca16b7f5429b0f0a9
SSDEEP

3072:g97HOh/SSodbnckaYJNQMcZfgfxMZCqOHv2ByKmHIbwbtbwNDvDlU6rNDyKNt96V:Lh/SSokQe3w

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4340	msedge.exe
4340	msedge.exe
4232	msedge.exe
4232	msedge.exe
3844	identity_helper.exe
3844	identity_helper.exe
3728	msedge.exe
3728	msedge.exe
3728	msedge.exe
3728	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe
4232	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4232 wrote to memory of 5108	4232	msedge.exe	85
PID 4232 wrote to memory of 5108	4232	msedge.exe	85
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4236	4232	msedge.exe	86
PID 4232 wrote to memory of 4340	4232	msedge.exe	87
PID 4232 wrote to memory of 4340	4232	msedge.exe	87
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88
PID 4232 wrote to memory of 4736	4232	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\25f756cffba48191ef14b204f3989ccc_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdadfc46f8,0x7ffdadfc4708,0x7ffdadfc4718
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2868 /prefetch:8
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1828 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5560 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6052 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2212,2475118064572714259,1038425028600427986,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5484 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3728

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2016

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4692

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c9c4c494f8fba32d95ba2125f00586a3

SHA1
8a600205528aef7953144f1cf6f7a5115e3611de

SHA256
a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b

SHA512
9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dc6fc5e708279a3310fe55d9c44743d

SHA1
a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2

SHA256
a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8

SHA512
5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
20KB

MD5
397383c90a2d930f866f405747e27466

SHA1
7bb6b5d6cee104c877dc5c3462f61232ffe5b360

SHA256
a67db01d19e15d8fa76e5a075e336e195325d79d277a83aadb6a440acf887c47

SHA512
4357eddc0581e3cd6209646540bf59756cb4035d7dba47d5cb6b0050e6c202bda65721d4e9d644f37e3cd105bc5fa240574cfa96649f01e2769b796b523e08aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
6d82d008cd97c1231170eee969032ff4

SHA1
42e6e666ec235f125fd753c677cce9d6a365c806

SHA256
224d29e5285012f1a74ae039b8234c8b8cfb5d21371e2d5155692dbdfcaa8e84

SHA512
79737380b134f4f7beec77a413779477d22bcc61a89de35025e75637c3ac885c6b689d0ba1f50547efef6c2b4c88531ba55ea9bcdd64ff92ea20584ec6a1073b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
e704130af2374785402d811446dd5bee

SHA1
1ffa66d8330b7e4205f06bed6f13e529a5bbf571

SHA256
0f4366c4949ceb87f255c462cc74f85b6ee7bb079f645012c93d208348ebad5d

SHA512
4e7096f10bf6626d2e0e5a923874e1b454f43dec5e5cc977700dcd5ed4beb1142c44819c5bcd52e8ebe7906be655e682e92a50985969e529b342080fca9ffcec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
47852b3fc514dac32f3352b488c06ba6

SHA1
d068bb103e5231b16d39252c1bbc9cbd22faaa28

SHA256
e4984115eea0c127b413299901b4f14e33ed800d859be58aadb45fe2105d5e17

SHA512
d3091869d53426771e4efc8574b9c97d0d07960a1053f02f836dfeda6d1a52916b883c2730c00000bb2faaf169bf172bce1e8299a7f11a17e9b20bc765780a40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
c874c6d60bca938bf63f7386076c9045

SHA1
3f8bfc24d9cdcf46f8db1672fc6e7b526176db73

SHA256
ed42a86c3a17dc380099a9c684fb613695e89b0b6bb8ae571b6badc663dcd88a

SHA512
421612a95518c9d190cf21c008f0015d6c9791952b4014ac9f77f69bffbc2727ae1a962e2aafb578524f1323ca92c8e785c484ca6d23eb6ea7168c236c9ed094

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
707134adc90aa5d72e2e051132fe6eb3

SHA1
2a3b683b180e4f026fcaf38176ef240c8012c4f4

SHA256
e4be2ee26df92c8d7ae5c616b0354f2158c51cff0e613d9dc26adf5fcb01c8a0

SHA512
2893182827f7a789ae3fcbbc71e2e91a5cf1e127ee7fc01daeee13be067342207c2712d52a7a2be243f1b3abc1c2389932ab99cba2fd6e7d66f0e2b676900013

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
9bb0ff3d10f40a301e6bf1b2ee6fcc8e

SHA1
8284a92f8df607e8d907c9f31bc50f371ff0b8c6

SHA256
970051435eafed891ff47b1576982b9a4fd6ca2ac55c975665774d458ec66598

SHA512
c32fd926d503e46132de39a5dc2dcfa4c0070a84164182abd253edbef8d02da95535cd10fe4c294e4e4657234e2f4a6a8dc4b720f085f12309e6b1727ae8dc2d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
488d3af30d54a1a8fec00bef08582e7e

SHA1
ae704bac5f4799d1c9a25ab661d07a4ed66ec170

SHA256
b026d35b5cbe1f6c5a6938ffaaecc5967655e9017eb56ee1d67354708a923820

SHA512
e9cb78cca2f827bd43e3273955f2f7ae7419a6ee743386055b5bd594048b144e0c67925ad3717860cb7ec18055acd82ec346214670a603d4316280f208ce6acb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
7e327e4615c84d4d2457e7b58808d2f5

SHA1
af123def57c742c01e8810e658c3b3f9fef9a0e4

SHA256
6e59dd78b90fe639e57fe1253cd9b0ac506befa186ce953022b96ab1365576eb

SHA512
ac016ee5ae1e5e93b29de86660e0232d56cd247f3429ab31ca82aa30574b4466317e6dfac504c4717ae7062b33b005032fb653fed0a90152f4b598cf3f174a70

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
a63c2345c257c753381869fb46021b8b

SHA1
26fff3bc7f5725268d7042da0e86ac7451a503e2

SHA256
51221c0493a921af570c3cff9fc4debae613bca79e5546607852ab9c6b1e7513

SHA512
577c878ed16d4c4b1637a60e0c0e5c90e2084b0c455546eae976bfaf6af7cc56f36421d67510ab893b289c24e66f7d2d1d5dac156dd48f814712d766f30d7ea7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
a3294a40d71fa5f718d8e39c130d245a

SHA1
399e87d7b0821e4116082733c777fd91abc055df

SHA256
803f3d030f46136371f3a952de8a6b4b787a3b2c9d70db64d2446539cf81582e

SHA512
60edab27f0ee6871924e0a61480ee529d285d263b3452714448c5d82a9190c4897f98adb195c774d4f563d17aa5eb6cf454b5a9fedd09e5444c452472725a1bb

Download Submit