b108ced7561c1f712353149cad5426201141b7f13d345043abc50d797de4a2dd

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
12/05/2024, 15:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3abf9806f5828975051748f7a90873c6_JaffaCakes118.html
Size

175KB
MD5

3abf9806f5828975051748f7a90873c6
SHA1

dd7ff551e029cb44fa42cc3eded82e430187983f
SHA256

b108ced7561c1f712353149cad5426201141b7f13d345043abc50d797de4a2dd
SHA512

7404124b63d2000bf18e090aae80a8ddb30af8c7dfc9118a3de8078bfb7c2e2bc5431d6c76d71089e13037ccf1891efa840e9b30b15a065e2ff5ac44003ca6d0
SSDEEP

1536:Sqt58hd8Wu8pI8Cd8hd8dQg0H//3oS3cGNkFoYfBCJis0+aeTH+WK/Lf1/hmnVSV:SOoT3c/FNBCJiWm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3220	msedge.exe
3220	msedge.exe
3712	msedge.exe
3712	msedge.exe
4812	identity_helper.exe
4812	identity_helper.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3712 wrote to memory of 520	3712	msedge.exe	82
PID 3712 wrote to memory of 520	3712	msedge.exe	82
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 1552	3712	msedge.exe	83
PID 3712 wrote to memory of 3220	3712	msedge.exe	84
PID 3712 wrote to memory of 3220	3712	msedge.exe	84
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85
PID 3712 wrote to memory of 1216	3712	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3abf9806f5828975051748f7a90873c6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9272c46f8,0x7ff9272c4708,0x7ff9272c4718
  2⤵
  PID:520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2836 /prefetch:8
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5176 /prefetch:1
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,6517390992080104685,15613554233879286281,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5112 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4804

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4984

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1228

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2384

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
46KB

MD5
ac83857f0497a4a0e7669329827cf228

SHA1
18ea483c966969e43a654fcadea9719a8aca370c

SHA256
43337a1354f376890cdb73f3dbaf95a8027761c574c30cdecb321096be485d3e

SHA512
6a35c50764d31d4bac07ddbec2329238cd04f2c58c00629e523ae7fc2a7d6be5d1226f8fb6c3c1043b215c38c47951a66fa8a9d4f4d6ddce7664bd1d011db2aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
e00aa7c6b7453c85994c41067cc5d239

SHA1
ba144bfbbe48508aed20a1901b95a8d7fd322f0a

SHA256
f73f2e73961fd7be1215f8f76e5706123a2f6c08ae9503426f3077d35581a7f7

SHA512
9efc8b6f454afec63369cea6ae9608a0264a71a40130ea0058997f78560800260d448b33e8abe412c914b90719c466da475c375329f2185e55d71569f9b5b8e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
096d4fb39f2461051defbd3eff1dde71

SHA1
f33fdcf6f7ab79c787940240372a47bfc12b8840

SHA256
1262f08ef408adf9a72c808e173c590640106e71818328e69ca1884bf76e0411

SHA512
fd62bdebb1a5d098e1b24d179f84fad8e9b08e92f7d6d4f03c285bbd49a184a2602991013048aa2e0fbcdbfa96992aa63487bb82587962a8d6a673f874b52eb6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
dda3c1aa5770f96e88fc93cedc0ac40e

SHA1
90f420d447340a58d4f1663b305bbd0b1caed85d

SHA256
0a9a41c66e0b4615f82690b3dc5122337480d098ea8059bccee283a4f3ff548c

SHA512
b0833eea3bfbaed10370ca373cdefb7d48b391941286d47489815568c425a8e9b6919ec91907d1713c8290f11a630cf0468b8fcee0312a71404f19053f16f642

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
285287273c0d25dfc96316daaae652a1

SHA1
6eca2aff3e199da29a67044c63c97b9f4da1e55f

SHA256
4ab978ada594f4670bc078c0b5d74ddb1aca2bc4fad75a203ce474d737ec9540

SHA512
7f976e6ea8e26f0c2c6a54cb66f65767015787488dc70212ae331973908f700e1516e89d64f038eceef5dc39be8a140e97cc8cd9a60f14f84e3689ea6088dae9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
d7dac6ffde86c42424272a7faae333fe

SHA1
af7b7d7f1b5da1800ee8f180b3612ca8697fc0c7

SHA256
de39bd14408dd5fe9c7bc26c6ce21ace9ea201bf67e12ddc423e63fb303327f4

SHA512
e093b79e980ad5f9c47179c1854b6ffe26468149975f32ab096e2fb4663570f975442ae792f6dfbb6deb11a18530b85e90ca4855092865576fe6f31464ad5b3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
bf8e262189521b06c7c743dfa29a8042

SHA1
d554ab3d65baa3cedbf78dad8eebd6f658499fb8

SHA256
183e63c6874dcbe516e56f6851ee93d2e4580438b8772c09cf6c6ffb67cfec3f

SHA512
23f3eec470a2365f19402155b07e1b736d4b6cb0e2f6319de5ed375484346b9dfaeef0a235af3fd04461ad889fa5ca2d2e5e24a1c5cea92a15f38573474f6137

Download Submit