73ae417e664d6673d9a2d71c3597061597b0b52c6cbcb6a0226e290e88136a86

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
14/06/2024, 00:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a74dc3046dda03bb2115e3b41c7671b0_JaffaCakes118.html
Size

39KB
MD5

a74dc3046dda03bb2115e3b41c7671b0
SHA1

98e04dda8b759e14bc589b83845c6d39c20adfba
SHA256

73ae417e664d6673d9a2d71c3597061597b0b52c6cbcb6a0226e290e88136a86
SHA512

65b7f60ed997291b0e7e7daae28f19c54796300a83e34780670974bd4e5bf9e137b33d57eed87c22774088140be97999bee43fe5f561034c7d07fbda7d3c6b4d
SSDEEP

768:kapHvqCeol1N4q/kdf3O5SQ3JU1/DG+MW29vOO:k6Hvgol1Nx8df3O5SQ3JSK+MOO

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5044	msedge.exe
5044	msedge.exe
5068	msedge.exe
5068	msedge.exe
3892	identity_helper.exe
3892	identity_helper.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5068 wrote to memory of 2844	5068	msedge.exe	82
PID 5068 wrote to memory of 2844	5068	msedge.exe	82
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5060	5068	msedge.exe	83
PID 5068 wrote to memory of 5044	5068	msedge.exe	84
PID 5068 wrote to memory of 5044	5068	msedge.exe	84
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85
PID 5068 wrote to memory of 3608	5068	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a74dc3046dda03bb2115e3b41c7671b0_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffad3f846f8,0x7ffad3f84708,0x7ffad3f84718
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1504 /prefetch:8
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5764 /prefetch:1
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3888 /prefetch:1
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,3528886571355988764,7026377316742302303,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4564 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5108

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:64

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3504

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
db9081c34e133c32d02f593df88f047a

SHA1
a0da007c14fd0591091924edc44bee90456700c6

SHA256
c9cd202ebb55fe8dd3e5563948bab458e947d7ba33bc0f38c6b37ce5d0bd7c3e

SHA512
12f9809958b024571891fae646208a76f3823ae333716a5cec303e15c38281db042b7acf95bc6523b6328ac9c8644794d39a0e03d9db196f156a6ee1fb4f2744

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
3a09f853479af373691d131247040276

SHA1
1b6f098e04da87e9cf2d3284943ec2144f36ac04

SHA256
a358de2c0eba30c70a56022c44a3775aa99ffa819cd7f42f7c45ac358b5e739f

SHA512
341cf0f363621ee02525cd398ae0d462319c6a80e05fd25d9aca44234c42a3071b51991d4cf102ac9d89561a1567cbe76dfeaad786a304bec33821ca77080016

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
23KB

MD5
e1c71f7c04be834f5587230db2ad24b3

SHA1
f3bab9cb99d9f343bf7ed3981aaa7450515d2424

SHA256
9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899

SHA512
205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
f8e4e51c254707abefa6c131ef3a71c5

SHA1
369b5f1fbc6241f93278c4ca8e47ab85b9e8da0e

SHA256
9e8d1399343797ee515df1ddb67e0c6f55b6f4639e552b67a86334d09e3ab5ba

SHA512
23fa400bf0a1044c354f2870daf11427bb7e2ee6fc4c4b57c27fdb7065391065f94eca68d16eb0bd91176d2d9a1dcf60654b01beb05425d5d5747c17f8fbddcb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
c0d756ead6768840e060d6f0b57423b9

SHA1
c13958e2d426fbe5d18fab0a44cf86513dff97a9

SHA256
9181e8d42e263a168d2abdbcd89f8af71388abaffbdf86197b0a2082108c44d3

SHA512
b94a98e55ee8216d84ca9bc6e89f5d55d27e458cdbe6cb431892395629fc2affc367e3fe4413d4537e0eeb18693f75a08e17ec67dd08069d63fe44350189e90f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
741f98886fdb5d022ffffb0a57e448cc

SHA1
d5a43978710e88fb99ed12f6815a5a2eb85fd3ec

SHA256
591f5b9f14a24e1fb030a35f5664d8aa00ec650f1bb71c70e3a90b7646d19ee4

SHA512
1bfb835489e53b9a441105edc9491e2a42adf195505fb6f96a764f0af450cb4110606087e706b5c937118c8380c9dd601a4a7e0731ad93d046e6d5c756f0598f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
2b3f420038c76a0db02b17b2f7d86321

SHA1
2eae5831b66db486b18fe459ed32280bba7e9b91

SHA256
0a7e9b9bf5cbba754fd1f6cbc51c0260d1945c67ba3131271f2be40666eeddcb

SHA512
350ac7e79f6886faefdfd846c2b73394087e3d432d6db4077b744f73edc0cac05e64356dad9437de04f35c7757356e9666badb6e7c4bdd0be9ff7a5424874ec2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
aeef31ed53a75df5c7a0bcc13cfca7cd

SHA1
18394eae1dcb86a927fce586d17bf8763045a162

SHA256
b0abd43bbf7448de66f3bc1223ad211ada073d34ad1c956029a69f460af6cfbf

SHA512
b38760e6d58232e6bb807f4183a837eb7b52c39d07ee17923e4258c004bc7801fb86ed3e6fcdc95846dec8c1cfcf18f25e4ca8e98ea478bc664f8f8297a51666

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
1125881422b17fa81a37eb5d4172e2ea

SHA1
22851d2d7e05c063778a8bb0ed670d790a2ce8f0

SHA256
18bbe56225e5d36031a8cf0531ac6e6839914e4f7814891316877860d26043c1

SHA512
6343b3761726626381929084fcf98b8c5f4f84f5b8a96018ade309c65a49965fd7abd4d1c896427f0f480545e544be2f1483c0f6a4fe8da8a6ea49c07f2ce9f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f709540c61771c26fd186ace55fa1e6a

SHA1
3f6f61b712809c0992aa55e9f599a5fd433e01a6

SHA256
ed49f03e4ac75a723f95db71f353c9f8da1e5ada27977a48f25ab38cdf25f3ff

SHA512
705678fbe81ae1eed523f141c708ce85f39179e4b5326e0027bc9e4de330e7a8c49a0c99c606b5083e11f901a3a65f3cb0d88aae8be77e7a16b021247a0dc5be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
5922f60711492497cbe1b2f464e2fabd

SHA1
ed33fc77f153c576785cc4887f790dc2112b270a

SHA256
4909832ecc130eefe29aee2fd42d8d75612dbdf7b4722b74766a5a8e570bf7e5

SHA512
072937d946408f08933eafb762c217182958677734740df150ec536e348f7244a69987e27c6a36c39cfdc866e2dd754a766118ec3aebf746fe464afc1cd3d139

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
50686ff645b1c419213df0ee516d16e0

SHA1
491c8a94e7ecea522022eecbc9a7810907de942d

SHA256
4c6824ad081f91ad435bf945b12df8714ae428069c7967c75cf92aaf13fb1eb6

SHA512
deddf427cc39f76856204c118e8b4873f797657ad66bfe704d9aaf24d9546e2fa4493565fb0c8c03e46c599a02898bdea80002969b1f0cbbf5b1728e12dae1fa

Download Submit