Analysis

  • max time kernel
    145s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/09/2024, 02:22 UTC

General

  • Target

    f98769a7c552c85f384d6e04c721e65b_JaffaCakes118.html

  • Size

    2KB

  • MD5

    f98769a7c552c85f384d6e04c721e65b

  • SHA1

    26ccde2f7ad02db45cef196e01567e035bac86e6

  • SHA256

    8d74f30b163861060432099884da13ae8c8b4bf232a78b3a2d73daeb788b4cab

  • SHA512

    9fb44009e36a171d7a2d5656fbe7ab50f85237e75188a32254b26e1445c0d0e104dab991e5c8e6a593c649f5bcdddb311854f05ad60668dbd228b2892fc4db00

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\f98769a7c552c85f384d6e04c721e65b_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2228
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x104,0x108,0x10c,0xd8,0x110,0x7ff8234d46f8,0x7ff8234d4708,0x7ff8234d4718
      2⤵
        PID:4572
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2256 /prefetch:2
        2⤵
          PID:632
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:464
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2712 /prefetch:8
          2⤵
            PID:1772
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
            2⤵
              PID:1180
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
              2⤵
                PID:736
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:1
                2⤵
                  PID:948
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4752 /prefetch:1
                  2⤵
                    PID:1100
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3516 /prefetch:1
                    2⤵
                      PID:1868
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4796 /prefetch:8
                      2⤵
                        PID:756
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4796 /prefetch:8
                        2⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:1556
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4828 /prefetch:1
                        2⤵
                          PID:2708
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4812 /prefetch:1
                          2⤵
                            PID:4716
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5208 /prefetch:1
                            2⤵
                              PID:3460
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1
                              2⤵
                                PID:1972
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1848 /prefetch:1
                                2⤵
                                  PID:2352
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3468 /prefetch:1
                                  2⤵
                                    PID:3008
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,9815917881862350817,13431220507880462972,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5904 /prefetch:2
                                    2⤵
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:1956
                                • C:\Windows\System32\CompPkgSrv.exe
                                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                                  1⤵
                                    PID:4540
                                  • C:\Windows\System32\CompPkgSrv.exe
                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                    1⤵
                                      PID:4008

                                    Network

                                    • flag-us
                                      DNS
                                      104.219.191.52.in-addr.arpa
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      104.219.191.52.in-addr.arpa
                                      IN PTR
                                      Response
                                    • flag-us
                                      DNS
                                      cool.moneynfinances.com
                                      msedge.exe
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      cool.moneynfinances.com
                                      IN A
                                      Response
                                    • flag-us
                                      DNS
                                      google.com
                                      msedge.exe
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      google.com
                                      IN A
                                      Response
                                      google.com
                                      IN A
                                      216.58.201.110
                                    • flag-us
                                      DNS
                                      google.com
                                      msedge.exe
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      google.com
                                      IN A
                                      Response
                                      google.com
                                      IN A
                                      216.58.201.110
                                    • flag-us
                                      DNS
                                      54.242.123.52.in-addr.arpa
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      54.242.123.52.in-addr.arpa
                                      IN PTR
                                      Response
                                    • flag-us
                                      DNS
                                      138.32.126.40.in-addr.arpa
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      138.32.126.40.in-addr.arpa
                                      IN PTR
                                      Response
                                    • flag-us
                                      DNS
                                      95.221.229.192.in-addr.arpa
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      95.221.229.192.in-addr.arpa
                                      IN PTR
                                      Response
                                    • flag-us
                                      DNS
                                      cool.moneynfinances.com
                                      msedge.exe
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      cool.moneynfinances.com
                                      IN A
                                      Response
                                    • flag-us
                                      DNS
                                      228.249.119.40.in-addr.arpa
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      228.249.119.40.in-addr.arpa
                                      IN PTR
                                      Response
                                    • flag-us
                                      DNS
                                      154.239.44.20.in-addr.arpa
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      154.239.44.20.in-addr.arpa
                                      IN PTR
                                      Response
                                    • flag-us
                                      DNS
                                      86.23.85.13.in-addr.arpa
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      86.23.85.13.in-addr.arpa
                                      IN PTR
                                      Response
                                    • flag-us
                                      DNS
                                      241.42.69.40.in-addr.arpa
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      241.42.69.40.in-addr.arpa
                                      IN PTR
                                      Response
                                    • flag-us
                                      DNS
                                      172.214.232.199.in-addr.arpa
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      172.214.232.199.in-addr.arpa
                                      IN PTR
                                      Response
                                    • flag-us
                                      DNS
                                      cool.moneynfinances.com
                                      msedge.exe
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      cool.moneynfinances.com
                                      IN A
                                      Response
                                    • flag-us
                                      DNS
                                      69.209.201.84.in-addr.arpa
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      69.209.201.84.in-addr.arpa
                                      IN PTR
                                      Response
                                    • flag-us
                                      DNS
                                      19.229.111.52.in-addr.arpa
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      19.229.111.52.in-addr.arpa
                                      IN PTR
                                      Response
                                    • flag-us
                                      DNS
                                      cool.moneynfinances.com
                                      msedge.exe
                                      Remote address:
                                      8.8.8.8:53
                                      Request
                                      cool.moneynfinances.com
                                      IN A
                                      Response
                                    No results found
                                    • 8.8.8.8:53
                                      104.219.191.52.in-addr.arpa
                                      dns
                                      73 B
                                      147 B
                                      1
                                      1

                                      DNS Request

                                      104.219.191.52.in-addr.arpa

                                    • 8.8.8.8:53
                                      cool.moneynfinances.com
                                      dns
                                      msedge.exe
                                      69 B
                                      142 B
                                      1
                                      1

                                      DNS Request

                                      cool.moneynfinances.com

                                    • 8.8.8.8:53
                                      google.com
                                      dns
                                      msedge.exe
                                      56 B
                                      72 B
                                      1
                                      1

                                      DNS Request

                                      google.com

                                      DNS Response

                                      216.58.201.110

                                    • 8.8.8.8:53
                                      google.com
                                      dns
                                      msedge.exe
                                      56 B
                                      72 B
                                      1
                                      1

                                      DNS Request

                                      google.com

                                      DNS Response

                                      216.58.201.110

                                    • 8.8.8.8:53
                                      54.242.123.52.in-addr.arpa
                                      dns
                                      72 B
                                      158 B
                                      1
                                      1

                                      DNS Request

                                      54.242.123.52.in-addr.arpa

                                    • 8.8.8.8:53
                                      138.32.126.40.in-addr.arpa
                                      dns
                                      72 B
                                      158 B
                                      1
                                      1

                                      DNS Request

                                      138.32.126.40.in-addr.arpa

                                    • 8.8.8.8:53
                                      95.221.229.192.in-addr.arpa
                                      dns
                                      73 B
                                      144 B
                                      1
                                      1

                                      DNS Request

                                      95.221.229.192.in-addr.arpa

                                    • 224.0.0.251:5353
                                      514 B
                                      8
                                    • 8.8.8.8:53
                                      cool.moneynfinances.com
                                      dns
                                      msedge.exe
                                      69 B
                                      142 B
                                      1
                                      1

                                      DNS Request

                                      cool.moneynfinances.com

                                    • 8.8.8.8:53
                                      228.249.119.40.in-addr.arpa
                                      dns
                                      73 B
                                      159 B
                                      1
                                      1

                                      DNS Request

                                      228.249.119.40.in-addr.arpa

                                    • 8.8.8.8:53
                                      154.239.44.20.in-addr.arpa
                                      dns
                                      72 B
                                      158 B
                                      1
                                      1

                                      DNS Request

                                      154.239.44.20.in-addr.arpa

                                    • 8.8.8.8:53
                                      86.23.85.13.in-addr.arpa
                                      dns
                                      70 B
                                      144 B
                                      1
                                      1

                                      DNS Request

                                      86.23.85.13.in-addr.arpa

                                    • 8.8.8.8:53
                                      241.42.69.40.in-addr.arpa
                                      dns
                                      71 B
                                      145 B
                                      1
                                      1

                                      DNS Request

                                      241.42.69.40.in-addr.arpa

                                    • 8.8.8.8:53
                                      172.214.232.199.in-addr.arpa
                                      dns
                                      74 B
                                      128 B
                                      1
                                      1

                                      DNS Request

                                      172.214.232.199.in-addr.arpa

                                    • 8.8.8.8:53
                                      cool.moneynfinances.com
                                      dns
                                      msedge.exe
                                      69 B
                                      142 B
                                      1
                                      1

                                      DNS Request

                                      cool.moneynfinances.com

                                    • 8.8.8.8:53
                                      69.209.201.84.in-addr.arpa
                                      dns
                                      72 B
                                      132 B
                                      1
                                      1

                                      DNS Request

                                      69.209.201.84.in-addr.arpa

                                    • 8.8.8.8:53
                                      19.229.111.52.in-addr.arpa
                                      dns
                                      72 B
                                      158 B
                                      1
                                      1

                                      DNS Request

                                      19.229.111.52.in-addr.arpa

                                    • 8.8.8.8:53
                                      cool.moneynfinances.com
                                      dns
                                      msedge.exe
                                      69 B
                                      142 B
                                      1
                                      1

                                      DNS Request

                                      cool.moneynfinances.com

                                    MITRE ATT&CK Enterprise v15

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                      Filesize

                                      152B

                                      MD5

                                      d4829218222c8bedb9ffe89dffd37095

                                      SHA1

                                      aae577f33f413ec3d09f2e7ff5d9cc20a602241c

                                      SHA256

                                      49239b229a2519583ba5d6de3702480b8a8ebf3cfaa8945100dbab25fcb02b7b

                                      SHA512

                                      03e26a2e3de41b8a829b5543da504c7d7ccdc4c112d629efcac24dcda23acb50a52b5b99572b5efb2a01cf392a457cf9fac85663b3d63f7606be00dba218f8f1

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                      Filesize

                                      152B

                                      MD5

                                      15e9c4b4eefb3e1c08a010e748e10f58

                                      SHA1

                                      3172378f2c7a00553ce086dbf53fcf3126c5a724

                                      SHA256

                                      07b56a769467e8b57f9b7acd9d32da266ca5000803758c18bb6818ac236c7000

                                      SHA512

                                      811058b539e914a812c88543bb6657de736f691d18d6dadb5e1f6ced286780fb334dc5f575babbcf4fd2dceda30d1bf4004b374c5775e7f278346b100b29eb7e

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\399e7760-689b-4c7f-8754-69f2028f9c03.tmp

                                      Filesize

                                      24KB

                                      MD5

                                      7915ba0545666aa5833cf9f9f86d45d6

                                      SHA1

                                      743ecc319bc2a54973582d4a5198042a48fbe8db

                                      SHA256

                                      f8fcc045da13bde0f5dec3ada86342105cbff34ebc2442bcf51e8ed509a95b20

                                      SHA512

                                      a53036251a22cdc95579ea8641c5574f1dc1f7dfd0390f00ebeafbbea0c1a2c0c3e6dba23bbbb8d8e2c77a3e1e816ccfaf84a97da1c334019c8df1414999d1f9

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                      Filesize

                                      5KB

                                      MD5

                                      d8988e246c017bd7d5e36fdfd287ed01

                                      SHA1

                                      1b905034249c557c27e8d819f3ef22764016178b

                                      SHA256

                                      5438c0fcc6c2f7db9c0eec1a79e6fa6cb6a3b206f569c5b64b736a5ce624af28

                                      SHA512

                                      6166bb73de72c6fb8b2ed95e1729acaf2b35e309a31575ce3d316205f2d0ecc8a9d3045361f1e8721d3b8e635666abcdd672bc9a05597d2c14e4146b5bddb487

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                      Filesize

                                      5KB

                                      MD5

                                      c0c6222d5b5366eea7f03f326bc94926

                                      SHA1

                                      e2e5d04a6ede1f20548276409b66806f9e10e80a

                                      SHA256

                                      a1a3945d221768feef9b8948dadf02f0c923af03ad68d92bd17660d3065498eb

                                      SHA512

                                      8304c327461593fe92f35e9c3c246591a7a8601cc949455dcb6dc38b758c208216cfc89b00df36f2bc363af1237a7680d44251b6a1fb8f517ffb290fb612d431

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                      Filesize

                                      16B

                                      MD5

                                      6752a1d65b201c13b62ea44016eb221f

                                      SHA1

                                      58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                      SHA256

                                      0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                      SHA512

                                      9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                      Filesize

                                      10KB

                                      MD5

                                      06983834c87db7bdfb1f444bfda292a8

                                      SHA1

                                      57a2c98dc4fa41d0147d73a454fcbb08fce45229

                                      SHA256

                                      9766fca1543c9feeac649555cf22457492323e57e4d78fc649ff98684402576d

                                      SHA512

                                      1a7f031b8350c330530b973578f1a8571a2e25fa9894566e635d5ab94a9d96fc5932fe95943113496e21bf7a927e32891b2451d6ece45d8a96cd9022873eed1e

                                    We care about your privacy.

                                    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.