a481e9c6f976fe9ed1e77952d271a635fe879a4192c6af1dc5e2982b16e63fe8

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
07-01-2025 07:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_544f89b706940c619c43375183232b13.html
Size

157KB
MD5

544f89b706940c619c43375183232b13
SHA1

f53d508462cd160d7486bae9dc0f22238531aa63
SHA256

a481e9c6f976fe9ed1e77952d271a635fe879a4192c6af1dc5e2982b16e63fe8
SHA512

e9cad371fd19bad9fca197374fc80c79a49e25098b973a6dc9a60cf0f43122d543eac74b36151a32f62d355908d74ce0f93f579282d087e4f8ad2b3f91ddc2d2
SSDEEP

3072:ZWFcSF3z2UP13G4k5QhLpOatVrbJQm/fNbYaaLStRWcxWUu/v66sbsGon4G59t9E:kJr3G4k5QhL8atVXfNbYaaLStR3xWUuY

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1764	msedge.exe
1764	msedge.exe
4700	msedge.exe
4700	msedge.exe
3376	identity_helper.exe
3376	identity_helper.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4700 wrote to memory of 2672	4700	msedge.exe	83
PID 4700 wrote to memory of 2672	4700	msedge.exe	83
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 2592	4700	msedge.exe	84
PID 4700 wrote to memory of 1764	4700	msedge.exe	85
PID 4700 wrote to memory of 1764	4700	msedge.exe	85
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86
PID 4700 wrote to memory of 4628	4700	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_544f89b706940c619c43375183232b13.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffce47c46f8,0x7ffce47c4708,0x7ffce47c4718
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2504 /prefetch:8
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4772 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4844 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4160 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6252 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6628 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6644 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7016 /prefetch:8
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7016 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4056 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6356 /prefetch:1
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,8751487222681582385,4845631971946840179,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5200 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1312

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1556

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2668

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
bffcefacce25cd03f3d5c9446ddb903d

SHA1
8923f84aa86db316d2f5c122fe3874bbe26f3bab

SHA256
23e7cbbf64c81122c3cb30a0933c10a320e254447771737a326ce37a0694d405

SHA512
761dae5315b35ec0b2fe68019881397f5d2eadba3963aba79a89f8953a0cd705012d7faf3a204a5f36008926b9f614980e333351596b06ce7058d744345ce2e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d22073dea53e79d9b824f27ac5e9813e

SHA1
6d8a7281241248431a1571e6ddc55798b01fa961

SHA256
86713962c3bb287964678b148ee08ea83fb83483dff8be91c8a6085ca560b2a6

SHA512
97152091ee24b6e713b8ec8123cb62511f8a7e8a6c6c3f2f6727d0a60497be28814613b476009b853575d4931e5df950e28a41afbf6707cb672206f1219c4413

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
215KB

MD5
d79b35ccf8e6af6714eb612714349097

SHA1
eb3ccc9ed29830df42f3fd129951cb8b791aaf98

SHA256
c8459799169b81fdab64d028a9ebb058ea2d0ad5feb33a11f6a45a54a5ccc365

SHA512
f4be1c1e192a700139d7cff5059af81c0234ed5f032796036a1a4879b032ce4eedd16a121bbf776f17bc84a0012846f467ad48b46db4008841c25b779c7d8f5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
3c1acab82d6cbb637800f5831d3baa5e

SHA1
446e3b30d5e068c6e3a13ab0ce96a0df8887ebdf

SHA256
94bf60307bfdd6fa561d83be9399ec934b974f74d8804bd1c294fd76d9cc83d9

SHA512
4e39fd47395f5afd8bcbe03dd2318397dcba4c1e64007577c3375049b02b99cfee7149aeb0bdaed4dc85b4b18c201df7ec01ed1337d5f5650d3d10bf08dfedfd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
6ed558d6a9e36dc381ab74d57d759d66

SHA1
b4309f05aceaeb9524cc4f2452714f186bcf5e5c

SHA256
d43ff55a746edd3ba11050adc9185ebdb255aa54bbacb1eb502a8a3b676b9586

SHA512
5cfe854034cc50396b2cc6a98431519504409f88dcc1a083d0b6e007f1419dbeb9b04ebf63499fe2e8a145a59a113bc56302a361f27b159acfac762a13f301af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
2358670890c81572d4762ed7fe8a872b

SHA1
c695f0e1bd431f0761cdb31b8ed9952cd0a8e59f

SHA256
6c885ef0cf25b331e8101c6856a07b224678be6fa876567a1058aaf4cf578dc7

SHA512
6c489f143fffa91564a3a4448577291937370b6741d1650641c8b3510687ef8b5b4beccb97332f8a3f2fcfe0cb6789f76654ab0b1e336b15dcb38210100fa7af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
5d6f6e9244e9ccc6312f05c46242df65

SHA1
d52d1cf0f8ea9d3f2d0c56369441b34aa262870c

SHA256
9e0ff8256ce88a28f573bc2fd5015808b04d3af16b01837ec955cb936239dd04

SHA512
f6e5c0428274e22c0bc3a31713d1a7febdebc2b9b362092f91a4eca2e9990c4f6dda96ca83def402b3f194b8e051ef598ae4e0789b8fbe000baef05173f87e4b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
6cd3c69b1befc694b67c048e91afe600

SHA1
419da8e528dfb5a11b5d14c98d5eabdc8499fdcc

SHA256
86190dd2354697262f3264ec79bd9712c6c5ac81ae4a848d2fcc5778031ce50f

SHA512
ba9645f15e6193a4585cec3a73133bc5e6a3668df677560e936c41d6fe063b27d24f27b7bbe66455a03f24ebc2bbc8651ad830adf918b862769d46de80a8ac60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
ecde235fe7a194f31cd66628961e1410

SHA1
7a6c1517fafa1575731dfd4a0ccaf1ff549d2600

SHA256
e7b176febaf4cec1eb2fd96d27d7a9a570d23dfb9340bd7bcace0d2390d5bf4b

SHA512
d913c09d8f904385c6a6eb2bb68da4227c4862b71f93a2905c921a02af985cb67ee5baa694236feb592b89f505c1100496e57be6f0ab4f014ee817bb1fb756ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
24919e7952737d4161c9dddbc41413bb

SHA1
9cff43d83d19f5b1b900b46068efc0aaf6f7db4b

SHA256
b6f8bb0a9ecca75e5868a42d73142d493550e76cb2e35582869a07ac98728851

SHA512
66005c165c30aed312780a61c7d77626b0c08954e3b2967b2089451179a9710317a4498ff651c5109df8449248a3db4e9f422ca97c0787e3baf83af8f02210d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f6734b124a02de7761ec6371455c6a98

SHA1
1a39c3e1162cf1ec0e66ec1b681921255699003c

SHA256
0902a0ebf3ec780514e437d360539b9a88ae617212ca6fb788c87d11709ae10b

SHA512
d1335d30746fae48601f02cc91d872973efe8aafdf779075cf2eee74a2ab451f123bfde5da18bd94c5c00bda0dba120ef81a21177d6654356f705266eecc9bc7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
872B

MD5
bb6c0eee370b2e4236158f1d7db15348

SHA1
ff454bedd448dbb8317b0fbf669645486a05698a

SHA256
dda740d5d76aea518467155406d109f3e237091b098500ffbeeb1787643a55c8

SHA512
6ca920f309a7bcd451d1584d644b4ba3b82a03202da0683b3f3ab4c7fe97cb574bba9219a01d011f2b1977a8419ca6401b5a5fc58e6d997e9889a0fca5b106f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5805f6.TMP

Filesize
537B

MD5
ef140b164538292aab9b8064989305c3

SHA1
95b2a7c6ad38b3fda5af6568dcda82bf8bfa4d24

SHA256
dc7ee9281295021c9fd7689adecb1fb16036c0c33723977fcd913d2b717235f8

SHA512
1823709afb23688e903f075388300079b176baa5ef0b358a15b09aa19341a0ddd5005c8c12f529305a26284bdc5ccecde0b01399bd4c92deb2061edcc374eb92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
15f4f742b0d7e3491ae8a86333fe3ff5

SHA1
ec6582a0981da26e39e87d094e535c2845ea0e31

SHA256
63b63fd81ebc31337d2c03dc28bace525feecd81f65b236ae5cb51ff7dc90695

SHA512
29acd5ca401be9a4ab1cc955fe1569f1203683f7b5d2d42cb10b51afde91ff917144e8c9df6d59bb7e3dfb510d8c599a874203aba7dec2cb7e1c9998f08ae557

Download Submit