9b871d454735ae5f7396dc5aa0ab7b94e645745b7259cab774b950ebfb0dc988

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
07-01-2025 06:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_53977920ce30ed31cada4ab7aa001106.html
Size

237KB
MD5

53977920ce30ed31cada4ab7aa001106
SHA1

5c0d8d5d705fc6177ed00161ec6afca448ae4c4a
SHA256

9b871d454735ae5f7396dc5aa0ab7b94e645745b7259cab774b950ebfb0dc988
SHA512

66de1466f6935000e2890ab5db9765637a28481fd5348a2e07e42f7f19a0ba4d108164d5dc49b17d326bd93baeefe15c049a7aa3b1fb94216a35c06921d294c1
SSDEEP

6144:SykvBfbDtNbhG7y9qf5K+zeQ8WUvfBU2/IBwym4l:pkvBfgOMP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
972	msedge.exe
972	msedge.exe
2836	msedge.exe
2836	msedge.exe
2108	identity_helper.exe
2108	identity_helper.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2836 wrote to memory of 1848	2836	msedge.exe	82
PID 2836 wrote to memory of 1848	2836	msedge.exe	82
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 3092	2836	msedge.exe	83
PID 2836 wrote to memory of 972	2836	msedge.exe	84
PID 2836 wrote to memory of 972	2836	msedge.exe	84
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85
PID 2836 wrote to memory of 3480	2836	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_53977920ce30ed31cada4ab7aa001106.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcf63346f8,0x7ffcf6334708,0x7ffcf6334718
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2664 /prefetch:8
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4952 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7152 /prefetch:8
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4688 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,6013244000358932848,15319006607828293835,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5812 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:392

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2160

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2384

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3612

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56a4f78e21616a6e19da57228569489b

SHA1
21bfabbfc294d5f2aa1da825c5590d760483bc76

SHA256
d036661e765ee8fd18978a2b5501e8df6b220e4bca531d9860407555294c96fb

SHA512
c2c3cd1152bb486028fe75ab3ce0d0bc9d64c4ca7eb8860ddd934b2f6e0140d2c913af4fa082b88e92a6a6d20fd483a1cb9813209f371a0f56374bc97d7f863b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e443ee4336fcf13c698b8ab5f3c173d0

SHA1
9bf70b16f03820cbe3158e1f1396b07b8ac9d75a

SHA256
79e277da2074f9467e0518f0f26ca2ba74914bee82553f935a0ccf64a0119e8b

SHA512
cbf6f6aa0ea69b47f51592296da2b7be1180e7b483c61b4d17ba9ee1a2d3345cbe0987b96f4e25de1438b553db358f330aad8a26e8522601f055c3d5a8313cdd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
6d54a4bf05838cebc89a6361a47b81bd

SHA1
2835460938629fb45e5c33dc78b3ec08a78d5d2d

SHA256
44420edb14ba42276a6110c8002dd8e505da9edac37e1fbb1479c52bbec1c2e4

SHA512
53cfc38b68bc01d02945b57e424bb7facd94e2979e020e81f6142ea54c908a5a5d6fc09a20a082c431141f07f3c2d3bc528a8c7c7810f86dd25d476832fe9dea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
13ef38f9438ca093094705a9cbd60ee9

SHA1
41ea88d26314f7ef6964731bc1ab1a16df39ea4c

SHA256
0d76d663d2310201bfe8d6123d918a820113ae0a3feaef160fa22b5b8ea258bd

SHA512
63de5ca2ffefada95e7e1b17479d706cdcb71555a8cbe4ddcf5a687932ab1f9a25bf032fd7ba9296d9ca38ef1a97e657bd29071951b3f70ad525018669cb0740

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
aa44e1bbdb80b901b4e3640ceba4d23d

SHA1
3398c904860ae442c75cef7cb8cf526f9577e76c

SHA256
1b1fb453d4b85c041ba616d9dae28ecc0e321eae82477893bf909851e904c8a8

SHA512
18b1af77d2bd1444878ee3d544c779252cfc1e792ae9302a8a5dd84c26dc6a6a9da36e288200a549b5f4ad2691a3d8234cb27ce857cdc41f14768ed9b3750461

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
84fbf6d78f0426eedd39dd6169f839a1

SHA1
b1547551acd1f30fedd0992117bffd6421ed2746

SHA256
f9b17978d613aeb07b1af6d5c6944f367c7a13e7322899f216c2fc4ecbc0a8b4

SHA512
e5a6347ad3e9ea05c8a521618a62423c4b79f4fbc4b3a055e8a9f05433f5d7ec1a528261ebb50c375b4cbcef6113d331940593e49e6ce41a725e968802d1b15b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
98bd6fce6892af9f0bbad9c60d18757c

SHA1
b9f8b90a7e6e1a5293b9d081ca028e6d76a3e568

SHA256
0bf47a598b979afd2a6f64b64405eb4ed697836393a665fe115b9c23ee6fb5eb

SHA512
476b1338bcbc8f3a1b3a067a49548f700ce58ba65fc50acccf99051560b54f9403d685c2513171e4512600975936af7d905518604297e9499294f20af581f138

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
7bcf8c573a5a0bc779d32a8ecd6a1e7a

SHA1
a27204429287d5bd87b72adf9ea453994ff04625

SHA256
bfe43de63ce0dd32accf8c72122599f84fff4de43fe34f72b5797704cf554eb0

SHA512
b1e8fd72ef4a57c91a6bc25605a7e5a3802d476996cf58b42596178a16964696be693b64f26b61e15d6064891dd16dbc8d62b0f88fc3c4bb5cf25edf0332368f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
040168644b18fd739de8893851bf0c1a

SHA1
dafc001ea664d552e9292495ee4d118706f10894

SHA256
2906888e0e86618c4aa22f2a1350f9ddae8429a27ccbcce4f2e633d0d73f4ca1

SHA512
e4037c2e5dd3404e4bc7bac7e626e556e26e89972588afeb92e7f37a38ba530c5f7f0850e8b18759a9c15b69ecff6c2807b76b693b86428ce6506c70ae3bd9ac

Download Submit