fd7bd49a624c2404726f4e94574f5d81231644ba8809fa0864785559f882c1b0

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
30/05/2024, 05:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

832cf0065ea85549d77d9e609e3abe2f_JaffaCakes118.html
Size

37KB
MD5

832cf0065ea85549d77d9e609e3abe2f
SHA1

a2bf6d56998e5b35673b387eb01964ce45c56ed4
SHA256

fd7bd49a624c2404726f4e94574f5d81231644ba8809fa0864785559f882c1b0
SHA512

904b5f43f31c49da203f7d3b599b4e12ab4696cb86aec824e644cab1f9329d2c8fad765c7c5a2095a3415bf0d5d2a9f83df1516c2bd74123a29af56837085221
SSDEEP

768:S7C3XB02fCVCICICZCZCXCXCXCXCqCqCeCeC5C5CWYeHpUb:S7C3XB06ENNgg6666tt33mmT/pi

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3724	msedge.exe
3724	msedge.exe
4984	msedge.exe
4984	msedge.exe
4316	identity_helper.exe
4316	identity_helper.exe
5644	msedge.exe
5644	msedge.exe
5644	msedge.exe
5644	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4984 wrote to memory of 1480	4984	msedge.exe	83
PID 4984 wrote to memory of 1480	4984	msedge.exe	83
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3980	4984	msedge.exe	84
PID 4984 wrote to memory of 3724	4984	msedge.exe	85
PID 4984 wrote to memory of 3724	4984	msedge.exe	85
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86
PID 4984 wrote to memory of 4012	4984	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\832cf0065ea85549d77d9e609e3abe2f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff6dc846f8,0x7fff6dc84708,0x7fff6dc84718
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3736 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,13312147347326829852,16046854560485108612,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6260 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5644

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4280

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4316

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f61fa5143fe872d1d8f1e9f8dc6544f9

SHA1
df44bab94d7388fb38c63085ec4db80cfc5eb009

SHA256
284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64

SHA512
971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
87f7abeb82600e1e640b843ad50fe0a1

SHA1
045bbada3f23fc59941bf7d0210fb160cb78ae87

SHA256
b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262

SHA512
ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
230693a0262de019841c759d6a80bdad

SHA1
58b3dbee6f538d30f02bd2e179621765f2b0e3d8

SHA256
108926afa27770b9aa60adfd4885f45b8540d52c4c7fa49c7c5a2f670ace3515

SHA512
c8314799cde6235703bab322cd501eff09606bf81609fc553079de367082d962cc519e226be9aef0a353a7a82f966e9867a41cb2288ed851e395186f3e4949e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
6373d955b2317e4cee7422ebf3cf0ba5

SHA1
f2824b13f83b41fb05fb7b822c97ac29ad007ed1

SHA256
5beea013a303e031d1dc96dad2baf249de3ead018043b86f1fef320fe9d0ff79

SHA512
f0586ef5ba0a40264efe6085eee1100055a4fba9d36ae8ccd2d5403d3d8021c42fde7c9aed64201309dea1b13ff3a3103afbd7724b7f344f62af02bb88b22f08

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8e67595543c4d7790741a583cf8d46d6

SHA1
22d2956a4d1c8bc9d839042be4388f89877d731a

SHA256
db36acb3c4afb143b7eff64d1832c46695d2f0526679df9db8b89e90591fda2e

SHA512
60393cc6139fe9757d66317efdec362888bf5b1012da71cbc82b1ee4929bad05ed1a35006349dd8243ec1aac490ac850a5a48ab0fd4566fe13b031e4fff8362c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
cde0145cfef4b14664290bfb11dac416

SHA1
3d46527cdeae251013c61e50f74ecfe672a6a261

SHA256
e7a835e5decaf1294f37be5bc7a7ac328e91d90f491442455ea6e822fb148b94

SHA512
e4a591603e37e78d224dabb78db214b9b6fcd707ee5673a99d8bd8c09b4d7f36b39376babf5d6f2e1cadc22a302aaf177979d3ecf9384f859aeacce6f82ebad0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
88b4107bc200951a206a524dd2b5693e

SHA1
11923f404e99d1abd3eb9b107739eba976059b7e

SHA256
d0983c2113cf8b12fe28b3d2c79f4c12487f9ad91a22dfb69e838721f1e2c7d1

SHA512
168f34e4ffa751e66c027c4fc887fc9c3d9323676283e3ca6d0e0027b3367605206d75f29ddf1e9db96907af394a9cf6f985814633acc858a500617c26b5eaad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt

Filesize
99B

MD5
2ccd03e6a2d9ead2fa6f6133c2f279b8

SHA1
e45576ac9faa7965bac43b6407807a9cc78b72e9

SHA256
5499f6264be25eae460371a57e4d665236005b3c0638f01937e31a3fb2c24c0c

SHA512
30b7fbe410e26066fda4649df693f86571f76f8d17247423e5da7968a4aee22027df34994a8f21fe36ba3fd83c07e9e9cdd7d51ff1d567343b43622972560dda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt

Filesize
35B

MD5
343859b4ad03856a60d076c8cd8f22c3

SHA1
7954a27de3329b4c5eefd4bdcb8450823881aad6

SHA256
8c79b653c087618aa7395d5e75198da7d3b04c08654c39e56b1027f9ef269c2f

SHA512
58014a4e7f2b4b0d446fae3570196b8fb95d0d1b70bdab0dd34a74d6c62cd8d7ca494a486f19c1a829988a3af83a08d401f18d1769ce1799a02ee09807234254

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
22cdc05a340e965e97d28f5176ced122

SHA1
2a56a8cc55433522a50d846958ae18ef688e62db

SHA256
710fa1708485499fa073dfbf6bfa8e45ea75c13c9add4c136253f763559620e0

SHA512
392079ec0f066edf80d9dc50a1e4372a4a943e40c72a40f673d71ef975b47d89bb279743d7265a2bc46284770036785479acef3b3d702f60df8155d8e471075d

Download Submit