588c4f83781b85793cda46d89b7dc354f53b1b82297b969d45883068822b3261

Analysis

max time kernel
145s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22/07/2024, 15:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

63abb01811d009a493f79191c976b802_JaffaCakes118.html
Size

57KB
MD5

63abb01811d009a493f79191c976b802
SHA1

77d26f067a840e7daa64108ad226d98bc33359c2
SHA256

588c4f83781b85793cda46d89b7dc354f53b1b82297b969d45883068822b3261
SHA512

0c3e13a6c78cb9675b9b5c3878ece303b2bab5ff68ae1b06920dd9546ec6de1ca37536785391ad6e62f6f26fce328dc3b208fa5f45965adced7347463c2af943
SSDEEP

1536:ijEQvK8OPHdsgro2vgyHJv0owbd6zKD6CDK2RVro35wpDK2RVy:ijnOPHdsL2vgyHJutDK2RVro35wpDK2m

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2804	msedge.exe
2804	msedge.exe
1652	msedge.exe
1652	msedge.exe
3220	identity_helper.exe
3220	identity_helper.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe
1652	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1652 wrote to memory of 3256	1652	msedge.exe	84
PID 1652 wrote to memory of 3256	1652	msedge.exe	84
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 1804	1652	msedge.exe	85
PID 1652 wrote to memory of 2804	1652	msedge.exe	86
PID 1652 wrote to memory of 2804	1652	msedge.exe	86
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87
PID 1652 wrote to memory of 3780	1652	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\63abb01811d009a493f79191c976b802_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xe0,0x108,0x7ffce37046f8,0x7ffce3704708,0x7ffce3704718
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3884 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3728 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4932 /prefetch:1
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6556 /prefetch:1
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6500 /prefetch:1
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,699381013810479956,168280910592390809,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5996 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4380

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4636

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1520

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Filesize
328B

MD5
597d5a92e26cde2516d9b39193d97b39

SHA1
c95a7e3e490b87dc7b78cc761e1f9f9248055181

SHA256
786cd69a57e8ece3bce18662668c05e9e6daa10852240a208081ce5558f90d65

SHA512
f01e3642618022666038cf7ab0fe591dd1aaefd3014beaeba8375df301527751454b1c87fd7250d0e25adf22915048954e4078a4d81928a584f807a6c7cd5642

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c00b0d6e0f836dfa596c6df9d3b2f8f2

SHA1
69ad27d9b4502630728f98917f67307e9dd12a30

SHA256
578481cd359c669455e24983b13723c25584f58925b47283cb580019ef3142b1

SHA512
0e098ab5f5772fec17880e228a0dccbbaa06dc1af14e0fd827f361599c61899fe07d612a7f7b049ff6661d27fdc495566dd20fc28ceed022b87c212bf00be5da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
54f1b76300ce15e44e5cc1a3947f5ca9

SHA1
c978bfaa6ec6dae05464c6426eaa6cb3c3e2f3b7

SHA256
43dec5d87b7ee892a3d99cb61f772ba403882ac0772423f36034e84244c1ca24

SHA512
ac26e5676c675be329eb62b5d5a36a0e6014ab8a6366684b0fc2a59ae5f061f596f462b82eb4e9f135d2235a0cbd4af96680d234eecc873a8397fd81507d277a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
768B

MD5
526be93bb61c33e71401faf3c4123d2d

SHA1
8bddf51157f0dcd5d0eeb9feac2a2ddaa6f4f6ac

SHA256
916c675a828cb12f213e78524e554d5c1b223e0185d9fa875b80499f292d7e8d

SHA512
f789909bcdb448abb54afd5a1641aba77c1cc5b66ca2966ab0608e6b13e31652aee5aa9622db53e68108552f61efae4da8b3e20a9cf9edc37e6f334af8ea5df4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1f82aa45be2a0e5b00f3d56425231525

SHA1
c4a2647d9b74b05f3c51ffba4e264677cdc5abd1

SHA256
af7fa0322d4be95533cd5507f92660e7428cd9a7a36c56676baa4ce302334c68

SHA512
cb0915fc5330e060b028297e9ee62fc557e1f56455bec6636b2c31912ac27ae22df0c4d491ac9360eec4d214d49bb6c2a1ee564e5729e165c5f911bb509d2760

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
bdbd0f76a0e4ae29a2c943ffb37dc5c7

SHA1
9cb98b5a4da312e74424cc9dde3e49b443941381

SHA256
7c5b264ee575c74b4fae1b8d8e9c797f591d2347935f20cdaeeda4970f116742

SHA512
617e14192533be9a0e5a4b95ba636180f1ce79a46f4f903e0019479bb2adf47f81bc5637b1ef9d052fdebe314942201cfe55ad29a96dab763bb59ceb20eda2f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f04c9011-015e-4dc0-9cf9-0d14453d57bd.tmp

Filesize
5KB

MD5
e23301596381191a8fe9904fbb3d21db

SHA1
212fd6af7a57376e4945c70ca7fa4a42715fa8d1

SHA256
d374a936230a4a259c52c5c86d82b0d5f46ce1fc78c34e7cde777f1482e42fd5

SHA512
85d24f5b16fcfdc39be793f4dfb9b82da1342c57d7250c19e6713e2c4af06b5ef465a25822b150c32ab9d1b25d6f19ff12a1640109fa0b47440f3664e6008573

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
6ea9a5e94578b6360da05dd4db273bf5

SHA1
0ece565a5003fc1a3519e21818c8692ab830b08c

SHA256
8c5a1e2300725eb0bd71364de059cefb43238a84dd80e49889c2a3a05dd81af0

SHA512
1e8a365fe58afcff2a9727b15a131ac345dc10e5d1d33326ef173e891dfc103b09b74cace10edd7e365210ec2c6be3158f344ea057847d324218111cda401ae1

Download Submit