32d911820095bab0c8651fe2d1ae876b098316d4e5844637333627e50fedc11a

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
04/06/2024, 22:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9669a289ab9de5c2c2a238f4e610bea8_JaffaCakes118.html
Size

245KB
MD5

9669a289ab9de5c2c2a238f4e610bea8
SHA1

d7cf011e036aa0f262afd22e3851441d8062eeab
SHA256

32d911820095bab0c8651fe2d1ae876b098316d4e5844637333627e50fedc11a
SHA512

9ed4ee7d4649eb53dec50fb60fc14a88483bcd6e4a2f4de2f80342cee012ba13c08b03aa1fd2196fc7acdc3a36c08db0e2ee75d1194e22414d70970cb747afd9
SSDEEP

3072:p3dHWo2YPugWFgvhAsZUPlIWY7RkjPSHSeTpdm:/HWMzZ6UC

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1960	msedge.exe
1960	msedge.exe
2300	msedge.exe
2300	msedge.exe
2744	identity_helper.exe
2744	identity_helper.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 5020	2300	msedge.exe	82
PID 2300 wrote to memory of 5020	2300	msedge.exe	82
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1768	2300	msedge.exe	83
PID 2300 wrote to memory of 1960	2300	msedge.exe	84
PID 2300 wrote to memory of 1960	2300	msedge.exe	84
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85
PID 2300 wrote to memory of 2920	2300	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9669a289ab9de5c2c2a238f4e610bea8_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb84cd46f8,0x7ffb84cd4708,0x7ffb84cd4718
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3408 /prefetch:1
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4652 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6956 /prefetch:8
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,12372379984702647853,3172933641653287473,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5236 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4372

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1524

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ae54e9db2e89f2c54da8cc0bfcbd26bd

SHA1
a88af6c673609ecbc51a1a60dfbc8577830d2b5d

SHA256
5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af

SHA512
e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f53207a5ca2ef5c7e976cbb3cb26d870

SHA1
49a8cc44f53da77bb3dfb36fc7676ed54675db43

SHA256
19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23

SHA512
be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
23KB

MD5
e1c71f7c04be834f5587230db2ad24b3

SHA1
f3bab9cb99d9f343bf7ed3981aaa7450515d2424

SHA256
9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899

SHA512
205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
b3c852214cf140eb4019945e497e2086

SHA1
89dac44e8c8c82fde8199f81118650df976aecf9

SHA256
95b21c51190752022ac1b216957367625e9c5686fe6b37700addb2b8eca01b12

SHA512
c4b0ed53d16562ee4ee25411a4bd09ba3c2fe3b571686980d5f1b2d8649451a64e4f54836bb7a9fa2dd63ab7c074c2ebdc119e83c203b6f02e005cbcaff9ed26

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
8f918908a5db2b3288cde9dc40bc3f63

SHA1
05e65796cbd95641f3a32719a6c235c309aa4fc7

SHA256
0c6131c77d1340969dcb0c8eb35a1b73def4ca5e27273b9b422ad274215ca099

SHA512
3bfbc675a56a4ba207259444bf63929af9b0fe5d9d4441cd13ac8b77699b6c01d3e2fc4a2dd41623e42593dbb06ee16fad489b67828b182b05e7478d8b0ef4fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
ab58cc42cf6bcd2407d2433e1944bce5

SHA1
49d72b2cff47825b49ae88d8482aa90f4b910233

SHA256
eee5835216f0c52f90556d442535f9547270c62db05d35ca5aa5b0b2bb9124f9

SHA512
d6f62e41abceb173661d9955c8e4201f725fd9ee28ce0b4d4492e95f21d02da28161ff9703ab6e77e7ae3a3f58b3eab63aaecd8a212d56e3648ef2ffdb0c3dfb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
34ad48c6384319ffb6e24d09760e2446

SHA1
e64d38d6dfc34895ef3563e194c59b30486ba46d

SHA256
cfdf78918816f643798aa2443808aa6f00a041802237cd903169e4a218be559b

SHA512
48436c64a682148109ff72277721c02ed7863dc59b8400b4b7e8c3dbe822a7d1be9a7b791c6b1b2a265fa126e470d485538dc026b3aa032d00f5d893a9068602

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
c97334b4ef4ddf769362587ca70c52e4

SHA1
b7ec8c797c65951e9a14965f002bfc091a97aa8b

SHA256
31c3677dd22e361b59c0d2208175810af4330220e79d47d5a2e7732eca523a5e

SHA512
a43583b47fd06595e7083eb57d60120a1f5ca887765ffbb13ddd026f3d991a6c5e34f16db24641655493a07fe62c0076d951ddd0e9e69e1757353849327e9882

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
ab208521f485402094ec3e88576ff1f5

SHA1
ccddf28f1dce6ceb01c2565459a8beeca946a2dd

SHA256
a940c2ba39a7c966dba842d2b17aa28d18cacdd92aa00ba9dbadfd383930c1ac

SHA512
3d2d40c3324a07684b8e4d6e5e54956bed6fc87ff7db3aa5e401a288d1981c4ba7007c7b7e3859108a303e61de5108287e98dc6b95fd7631dda00e515d30f0a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e94b303ba2936902a9e48f1fe4c6719b

SHA1
249b18d5f12d196adc63a1d06b3a9385921b5acb

SHA256
2f478c5664d0c4c07a5ee8c5324c5936493cd8d170d436550963248fa31b5e3d

SHA512
e8d78280c3dc83b11877096239b651e1ea27ba14ee225eebd0f4259e3952606f8fbe8b56f54734a783a547f0ccd8fdae8755e2bf7dda2eb1d5b25c57bb9c475b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
9e298fde7a7cdcb9e97f805722bdfcdb

SHA1
5530910cd2e991336e4a22ccda1dbe6884655b98

SHA256
6b3ea0d55bd29749ee4a0b332b2d494e9d9032434a8cbbb04221d17ec478f664

SHA512
90983263487ca2167f4d4c45b1c6b00c52be7f8b1323c5ffc9bb2215ddf926a98487df46548720841e70db60deaac709d6ef72b1dd4aec3f90542a617517cd3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
9b4e7ab0985b3310b2fb0614456459e6

SHA1
ac66aa3c4487f0a7218c30c47fc8ff80a39de207

SHA256
86eb38d624cb35fc08ba2942bd4939bc1505d7e8d9522a9db17f711cbc52759f

SHA512
85def4349290548314e763cec6d999f7ff5595520147e5942faac460435ddfd420abfbbfc7c90b82a6cf572348e9c2ebeef9779d33dfea585417223ae684ace5

Download Submit