7acdda4f5c4c1e04161fc58d071e2ef11eff3e4a4cb46fd939d8ffb02223264c

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
08-05-2024 18:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2619d4225113333bb245db8a8f22ba48_JaffaCakes118.html
Size

254KB
MD5

2619d4225113333bb245db8a8f22ba48
SHA1

533db89b9335630a593897c394facdc0488624d7
SHA256

7acdda4f5c4c1e04161fc58d071e2ef11eff3e4a4cb46fd939d8ffb02223264c
SHA512

cb5585be280ee0028bf7518833d7ac8ee86b0a114806311fd6278dc1614fb6d34c26dd2a9af3e4a8be395e399b9d856f8ab23fb9340ab2face7ac915fc421c27
SSDEEP

1536:E5fzGs7mPJWpBayvSBghqaeMBcNSa1OJ0xXSqyiegw13L/dbatQxRj5CMZ4DB13X:EtGs7m0pBay6RacOKxxyieL3L1/4DBB

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2056	msedge.exe
2056	msedge.exe
4272	msedge.exe
4272	msedge.exe
4820	identity_helper.exe
4820	identity_helper.exe
3864	msedge.exe
3864	msedge.exe
3864	msedge.exe
3864	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4272 wrote to memory of 2452	4272	msedge.exe	80
PID 4272 wrote to memory of 2452	4272	msedge.exe	80
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 4484	4272	msedge.exe	82
PID 4272 wrote to memory of 2056	4272	msedge.exe	83
PID 4272 wrote to memory of 2056	4272	msedge.exe	83
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84
PID 4272 wrote to memory of 5100	4272	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2619d4225113333bb245db8a8f22ba48_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe5c7d46f8,0x7ffe5c7d4708,0x7ffe5c7d4718
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2440 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2472 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5960 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5560 /prefetch:1
  2⤵
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,886809052848839914,11106992734913949313,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3864

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3576

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2284

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e

Filesize
100KB

MD5
85c39956ffbe8c589406f0b66949e851

SHA1
582b587ac2ab724ef6fc6260162b64e6fe604f49

SHA256
bd7f222701243e7e8b07c548f1cbd2808397b0cbdecba40b575eaeaeee4277d3

SHA512
610633fe0ffdd0f0cf3b6f500adaf3a8fd08ab783db8df7dc30ee1092b6e9f3fdce56c745752e83587707dec0329b4482e44ee2a3d23a1c854a5c4354fc7c0d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
699B

MD5
9a61be52eaf79cb45ee55f6c895eaaa1

SHA1
0574a53c7ff74980033b21c7d6d53df6c5827d65

SHA256
67c87f7e8e0d86aee60029a1c33d52823348914141e5211a491ce3244b098166

SHA512
8e04b3a38159c5ebfb30fae911a262c1d2e1ba43015aeb78eae4c1c1333cce3ac1542902abe968e02eaf3634da336c9afc8715271d27da6e418d9c735518c507

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d7e1e0ac25b09f8e77b0938cb40cc6f6

SHA1
6fe5fab8d95388e6e9eb343ac588668b7d76e167

SHA256
1e29dcd3e58813f8b24a504ff56e9177ad4fde547104638d9492ffacbbaa08ef

SHA512
b75555121f773ea0b781b57e9fa12837f487dddbec13ef5147972f80441af802bc49ea75fc8f39332e61d4326f10b7bd89f05d7bf66b2cd486e3c9f36e46f6bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e50b29d9d524fbd9ca54ae7b5966e91d

SHA1
a18e91a30b134f78475c5a42620a240446a97276

SHA256
fe0cf7693e72da46a2d01514aa448f37ab2a5f540e9d07eea2e3055502f03032

SHA512
10252606c0af65c9f6120c32d4a7277b2cdf429e897b1dc6ba69e1becb68af4c16ff1649b71ccb7ad058f0f66814b3f08ae13b7ce84c77fdaca93afc9a96af16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
493783d38eb2eb50603fdead0b77efba

SHA1
2e83c0fab00b058dcffbfb64a75c1f8ec0c6421a

SHA256
993540bf3b6d855a9fa49422a7f0a8b204eb0c795abba84ef130274939cd3e5f

SHA512
972bdb59cb7752498c15d3aa41582996446f35b43a64db54693634e28261ee47906e932fd01965fa00342431d49757cb922a0a421e2326c9e80fb6080b1b8611

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
569becfa36e16218203f8b5cead5e003

SHA1
4a211031526d44c4454fa52f1eba0dfe0dffca54

SHA256
c562ee7c74cccc86613da59f55ed5042d299d78287b3b705eb9e2db5e32b9e0e

SHA512
6b3ca2aa4f2d268483c8520e9806c3bd85ee454d6f0ee84a6c6169a0cc8637f1b152e81c99cd5a49ede8466211f432e2ba1713467d1f21283e221c4ffb2fed69

Download Submit