4c8b5a7ec92aceb7dddf212f9c4a9713b3616e687c1f35a1b5584def9da37b43

Analysis

max time kernel
137s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
01-01-2025 22:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_60ff99bd8b85aab357a905ad506b01a0.html
Size

236KB
MD5

60ff99bd8b85aab357a905ad506b01a0
SHA1

c447635c6f294601853f76c32ad96a16be19143a
SHA256

4c8b5a7ec92aceb7dddf212f9c4a9713b3616e687c1f35a1b5584def9da37b43
SHA512

1b4817010f709fd3b9d6f81e4d1edb49f7171f05076c17a6b365e421c468d99bf87303979a1104a80de3a51e013b103c259ff55fd6eb9d03df27136781b90578
SSDEEP

3072:5MG8fvPSXGp17Y/ZwHNyI5Qiwvvb62K2zhoZZx3cXmNRS9BmpsU0gD1ZYE8oy+dh:KfvP6Gp17WI5XwvGh8oZ7MXmNRAeOoMw

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
424	msedge.exe
424	msedge.exe
2316	msedge.exe
2316	msedge.exe
1420	identity_helper.exe
1420	identity_helper.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2316 wrote to memory of 1512	2316	msedge.exe	83
PID 2316 wrote to memory of 1512	2316	msedge.exe	83
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 424	2316	msedge.exe	85
PID 2316 wrote to memory of 424	2316	msedge.exe	85
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_60ff99bd8b85aab357a905ad506b01a0.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa0e1046f8,0x7ffa0e104708,0x7ffa0e104718
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2648 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4656 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6340 /prefetch:1
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6440 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:548

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1704

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e55832d7cd7e868a2c087c4c73678018

SHA1
ed7a2f6d6437e907218ffba9128802eaf414a0eb

SHA256
a4d7777b980ec53de3a70aca8fb25b77e9b53187e7d2f0fa1a729ee9a35da574

SHA512
897fdebf1a9269a1bf1e3a791f6ee9ab7c24c9d75eeff65ac9599764e1c8585784e1837ba5321d90af0b004af121b2206081a6fb1b1ad571a0051ee33d3f5c5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c2d9eeb3fdd75834f0ac3f9767de8d6f

SHA1
4d16a7e82190f8490a00008bd53d85fb92e379b0

SHA256
1e5efb5f1d78a4cc269cb116307e9d767fc5ad8a18e6cf95c81c61d7b1da5c66

SHA512
d92f995f9e096ecc0a7b8b4aca336aeef0e7b919fe7fe008169f0b87da84d018971ba5728141557d42a0fc562a25191bd85e0d7354c401b09e8b62cdc44b6dcd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
20KB

MD5
2ebfdbd309ee762211b4a2ac39708c4d

SHA1
b002922c672dbe1dd4caa02af24d0b1e7da616af

SHA256
54ae97d445b166859fe3ba6241b97abbac0aa0d158c72352b774d60ba3e81797

SHA512
d1687b7a6da07a72963c96a1e85661046d3d3c96f88445302afa09721fbe211a5fb8881ff14b346b0ebe8a20f5ced21979e9f58e256427e57b85d565bef17720

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
24aafe567b13dc48ebc29f4366bbc152

SHA1
5eef85cca2b09289fb1dc09de1adeafd001b1270

SHA256
6fbeb25cc02a71d79477ece4e484e6a990e2c4c1d823fb873a30562b719be464

SHA512
097a910da1ad898b8083f7c3088d0c7d4fad27616b93630df341589f4c55111ed0e152449271ee7101862c6caafa87c2b6f77e31202641954d24c9e6fb10ccc9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
ecd80b31765511750607c8d4c651f3f2

SHA1
0f6a3d5825a9176b2d0fd147fd5d4569fcba326b

SHA256
55dbf580a741bd29bd1280fd0fe945272635e230fdd97445cf3b16f75f31b073

SHA512
f7502357403cd3dad16ff93e37242f1b9229f6ae69b5c25cf02f4751b10eb9f8811444d6aacde82e7440a607bdc0ff140d18e047faeb0f425c65f6807089f48a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
9cc0d32168cf6a22c17ba214478c3ab0

SHA1
946e5cf81d0c5af48ba246b30e3d17f515bef890

SHA256
292578042275fe8711fb7c02c1e1dd3d8763347f5e8ee01046485650daf71153

SHA512
efb432c4eb68236dcb21d174f94b0ee7dd1f4f53891512e766275ca64a1c81e5645b61240433243aafa3fd5c64644e1b4394fe9152b5b26acea7b7fbc4faffe8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
87c60ae52b8c7843668ce1754d86ac1e

SHA1
f50d91976a2a17cae1b7c4a3699e10514c447184

SHA256
cbd351906ea33bd13a6d9409937f25d0a57ef2018fa77040181b080900522ea0

SHA512
4e689f6657bffc6e01f071c8177b3bb313c1f43b90ee85828393df9ed7c0efb13eaa60dd2fe18e87084696fa844e2126ed000fb8b86c41f4904ae9b5029385da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
46fa1e8542abcc7978ce1fc8f8842702

SHA1
54c7ac8610ba4ccd5dd699ffb5134e3ddce63d17

SHA256
6e9eed4837df3daddafe76b525d36c9ecdeb608eb4ad60e32e014ccdc2322b2b

SHA512
c24af0e87efc2db0f1b7207ddbbd89e0f15f4c7f8e0d06b831c79c9364aaea3a6c89fef24ec705790909252c9f3b2e7a3109450f15910d5726d41c3520e5104e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
618b6ebc6d3e091395d333a9127d0b9e

SHA1
777339a884746d19df7e960fa544cc0860c4376f

SHA256
7c5e6fabceeabf025af722d7cedb0966150a1bf119c0775b1bd54f39f52e20cc

SHA512
6df2a190754c4a407d2a9b22e414b4b73efba7461c8c59601eac6812cffeb1e6e413a7b63486c7eced43749ed3ace72ce223f8136d47151bf592931fe2de1a99

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f3070ca384dbae9d34af25ebf5193bea

SHA1
4f43f56ded3c47044d7feda0be7e60bb54c7860e

SHA256
61badc9d0f37374cd3a634d3eb67734b60bcd2d6b913c83935734dc76a9ff48f

SHA512
06dd58b8ab9e48688ecace1b4c493c91c81825c72bf9cc891f9e0035e6ef97d1a6098de75de5bf6b8ff1edd73ab03e145f7cd580a1f93fbc57f466fc594a779b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cd8877f2-9246-4433-a8d6-4a6c9c2811e0.tmp

Filesize
10KB

MD5
ba04e780ea442c762bfa817ea28549f2

SHA1
8c58692ca4745cf6b4039384db2d4d3fba070eb3

SHA256
5f18b4055f3833e49c88e0aa1d464a8d07cfc5498f9d651bc71231d9df8bb17b

SHA512
1475b2badf60489f711e272e2c726572926aae080fb78cde7c50f11dad467168e7c0f7071d0f10b23b5b0bebc91d828d11cd15e6d23b8fcb887906fd77b50471

Download Submit