7507d55e1be533d2065d1a0963dce04aac1dfb50d7168ad7b2f9516b594dc5fc

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
20/05/2024, 16:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6011155077970ba33fd4ff3d2d5697ab_JaffaCakes118.html
Size

175KB
MD5

6011155077970ba33fd4ff3d2d5697ab
SHA1

b42f12acca83fbbc06dc14850df9b1911cc38460
SHA256

7507d55e1be533d2065d1a0963dce04aac1dfb50d7168ad7b2f9516b594dc5fc
SHA512

5507589f34f7d7f2940a2efbb409c3af8c872b218f75d61ddf7fa9e9c4a9dc61dba75e5001b1e86e22a5934852263055e0dd6185a0b4fa207d15506b3473a7bc
SSDEEP

3072:AvIzPCOVXbP/EGjzaJDtebJz4M8+vW5Bcp/Zl2tfd:H7tPbzUYKV

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3708	msedge.exe
3708	msedge.exe
2296	msedge.exe
2296	msedge.exe
412	identity_helper.exe
412	identity_helper.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2296 wrote to memory of 1796	2296	msedge.exe	83
PID 2296 wrote to memory of 1796	2296	msedge.exe	83
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 1536	2296	msedge.exe	84
PID 2296 wrote to memory of 3708	2296	msedge.exe	85
PID 2296 wrote to memory of 3708	2296	msedge.exe	85
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86
PID 2296 wrote to memory of 1468	2296	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6011155077970ba33fd4ff3d2d5697ab_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe92d846f8,0x7ffe92d84708,0x7ffe92d84718
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4548 /prefetch:1
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6504 /prefetch:8
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6504 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6500 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2680 /prefetch:1
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,8293595861487522781,4484934883556106295,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5040 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4540

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3460

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4976

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4b4f91fa1b362ba5341ecb2836438dea

SHA1
9561f5aabed742404d455da735259a2c6781fa07

SHA256
d824b742eace197ddc8b6ed5d918f390fde4b0fbf0e371b8e1f2ed40a3b6455c

SHA512
fef22217dcdd8000bc193e25129699d4b8f7a103ca4fe1613baf73ccf67090d9fbae27eb93e4bb8747455853a0a4326f2d0c38df41c8d42351cdcd4132418dac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
eaa3db555ab5bc0cb364826204aad3f0

SHA1
a4cdfaac8de49e6e6e88b335cfeaa7c9e3c563ca

SHA256
ef7baeb1b2ab05ff3c5fbb76c2759db49294654548706c7c8e87f0cde855b86b

SHA512
e13981da51b52c15261ecabb98af32f9b920651b46b10ce0cc823c5878b22eb1420258c80deef204070d1e0bdd3a64d875ac2522e3713a3cf11657aa55aeccd4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

Filesize
20KB

MD5
b6c8122025aff891940d1d5e1ab95fce

SHA1
a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4

SHA256
9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e

SHA512
e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

Filesize
44KB

MD5
88477d32f888c2b8a3f3d98deb460b3d

SHA1
1fae9ac6c1082fc0426aebe4e683eea9b4ba898c

SHA256
1b1f0b5ef5f21d5742d84f331def7116323365c3dd4aec096a55763e310879d8

SHA512
e0c0588ff27a989cac47797e5a8044983d0b3c75c44416c5f977e0e93e9d3a9321b9283ea077e6dcad0619ac960ee45fe8570f1d5cc7d5d4117fee4f2f0c96b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
445b913d5f2e1f40d5da817a9efaa463

SHA1
89e9731665a188e426529b718855bfbebc6cc422

SHA256
424d8fa717e3fb785d84e3a477fbea5e943c10dfd024f146914ba8fb7dc44f53

SHA512
839c5e219b59effad3e04eb1dac22fd1b86c0857c024289a75494c3afa1b3a9bf3c4b0b770d307fc6de156952012e4e91f462a3a7d38fcf0f09c54718f8caf2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
c87ece22956bba513e1575ff955ad170

SHA1
65541d8a81aa08d3e5c863de6b32d0cc17d20c05

SHA256
103fae503e5dd9d005e3b1a68b53cebb4b6d811c313e96d07f91f6b9a47abd25

SHA512
aa15550e074823e817826a07c2d4e315e412c970df43668f747a0147b4280635103d33ee9a397f7163f8547e7809317656108c7707151fa32bd7f0acdd777649

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
5fe128bc5489cd3a3f10ba110696802b

SHA1
0178f426e677eff876664debe1f3f75862e02621

SHA256
7a59e4de1b34622aa69f8b4f0abe2e20dcfcc8ae41e6f5390fd8330172f4b1dd

SHA512
a35bdb8cd3eb92f27e64e65afe581b7c66dc759d182da2fa3ca2cc1e375e2bf2e5eef9850a369f49879a523badd2150f6e3eca8a85ec206acec03fb240df79e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
b39c36ff585600539610272c7a74bb18

SHA1
71e981c0afeca399632fe7fb4e362b67776eb63e

SHA256
3eb76f5a509a7ee44d099fc67669c584e36e091ed688940d0224c9233ef1b5da

SHA512
88b4aedb2149f5854532010363399fe95ec6107b131c537673ef013719c5c9a6a852a606836687bf8ac25d4f95c4ec1a631db17ba01d03ba09f8cdcebf6a8f3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
70016da95f5f2e62f9311137c92446ac

SHA1
1fbd0531637716430aba045c81491e32d5a01f84

SHA256
21128a079dc560acf2ab6267226d27e26126ee52366e4cd9c0cc3df49f1e87cd

SHA512
182f27bde213e51ed94b35770637ffe28b646d5d21feef76db9c463795c136fd412d41b70fdf9a9410488aa5f3e6b6e0ad7f89c8e7960813870d1b3b365402c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
be743f6af9a4c77dc4c0acdb17178927

SHA1
1bc5307d1a441dd742505faa6959eb557e358612

SHA256
f6e4d99c913b482ea2a9c98557fa5d28825866fbb67b8a99c4ee1a27a859d69a

SHA512
621d7d134db2c2526f4c8b2d992d6107006046b9326d7d583e4dcf53e8a0a6000a2c52f6238f0f786757cba23deb8be2f3bc29edca260f2424cd263ae1dce437

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ad6facca-0819-4987-8284-3748b9f65d70.tmp

Filesize
7KB

MD5
0ad14f97e340900e8bb1854aff584b96

SHA1
e01bb2ec44b30206d8f882513c83af01f9e204e0

SHA256
a867ae5a8cbaeb2e92c642d77879b45fc20672910c1932f3dea1689caf19fa11

SHA512
1b1d10a07f44b7fbff4357b1f20c88846ffadc0bd763ac8aae24b1ee8d7238bdb4032d08bbc148cf69eae06592847536dddf8da52b42a2246cdcf6f3474566fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
93f6fe78371705ff1552dfbf0c0cc274

SHA1
d59c92dbe95cced4cf60332d1e75bda68865888b

SHA256
66c81701be8f459ba9c315e84a444406ee820efa394034244e6e0a08ff15d3d9

SHA512
d44acbda8f27cdc63ab7138c71ddc7878c1d907294dd4c94724876ddffcfa70b56c67414513219063e899aa6e321c010a321bbdecd69df08d7169e0a37ba0edd

Download Submit