54b51c55cfeb4b1777b23ed29d19bc17cda787d79d0ad1836fe74ac421af938c

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
07-01-2025 18:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_72001ab0e5374506b8f98256e85ff09c.html
Size

93KB
MD5

72001ab0e5374506b8f98256e85ff09c
SHA1

451f5fabfb618293219ff6c7a766128d7a4e498e
SHA256

54b51c55cfeb4b1777b23ed29d19bc17cda787d79d0ad1836fe74ac421af938c
SHA512

4201a902a31bd823615b310809140078cdac8784145f9e221ca39a3e4ae0d2141dbdb2b74bb6f521ff5ba55f0311e0efff75bb0a20196f3a652b9273d8493f36
SSDEEP

1536:AhJXAUeAJQJ1s5qbXRL0Ep71yYQ7hJUj7lsewHh3pX7NFvV5PRPExT7pSCkgTLxv:kJzF5qbXt0E/yYyJUtsewHh3phFvV5P6

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3168	msedge.exe
3168	msedge.exe
3840	msedge.exe
3840	msedge.exe
2848	identity_helper.exe
2848	identity_helper.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe
3840	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3840 wrote to memory of 1060	3840	msedge.exe	83
PID 3840 wrote to memory of 1060	3840	msedge.exe	83
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 1124	3840	msedge.exe	84
PID 3840 wrote to memory of 3168	3840	msedge.exe	85
PID 3840 wrote to memory of 3168	3840	msedge.exe	85
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86
PID 3840 wrote to memory of 2904	3840	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_72001ab0e5374506b8f98256e85ff09c.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdcf3146f8,0x7ffdcf314708,0x7ffdcf314718
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2960 /prefetch:8
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5104 /prefetch:1
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4212 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4212 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6472 /prefetch:1
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6500 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,5176828227554914992,97831418802936017,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3196 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1360

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2660

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3448

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0a9dc42e4013fc47438e96d24beb8eff

SHA1
806ab26d7eae031a58484188a7eb1adab06457fc

SHA256
58d66151799526b3fa372552cd99b385415d9e9a119302b99aadc34dd51dd151

SHA512
868d6b421ae2501a519595d0c34ddef25b2a98b082c5203da8349035f1f6764ddf183197f1054e7e86a752c71eccbc0649e515b63c55bc18cf5f0592397e258f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
61cef8e38cd95bf003f5fdd1dc37dae1

SHA1
11f2f79ecb349344c143eea9a0fed41891a3467f

SHA256
ae671613623b4477fbd5daf1fd2d148ae2a09ddcc3804b2b6d4ffcb60b317e3e

SHA512
6fb9b333fe0e8fde19fdd0bd01a1990a4e60a87c0a02bc8297da1206e42f8690d06b030308e58c862e9e77714a585eed7cc1627590d99a10aeb77fc0dd3d864d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
52KB

MD5
f9ad6fffe23fad04422671cf2fa4a661

SHA1
b8366163961f1689411636988a73dbc16d13ff3c

SHA256
f0ca592df98944df58f4c281890809d30fd2117e471b8021ff138314efef5dab

SHA512
e9d95f4f0eeed04413a1d798161d1c20d876f5ea4440c13e9fa356a562e931f98d84b3f6a907d6541cf6bbbd7e84f0e106b48fe2f5fcce77d66f70e114834aa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
6ecc937078ab16e1b029341f619542ac

SHA1
b5a2ca693ffd7de77a58f4267649a9f3f78c453c

SHA256
ce11596c78d95da260f3afe2163c70554f8bfe499024985633e28b17a5fcd845

SHA512
89821861042a5b1aaf0b4a22e53576f218d6cf1f2a17614f533acb9d9c45b3d627f80b756513523e75b68de1614e0a642c7c585e94f774f2673951c5193551aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
86132298cee38b496869e4ee68503ed7

SHA1
0c8f8494c77c25883d553e4edf44071eaa5194fc

SHA256
a9c400d41d30332e288f2721949fb6932bfff9649c94b2cebc3499451021ce0a

SHA512
597355eb327ad29c2a876029f7d3d38074bd4d073af3eb1e929042eb6b60539258af670c98270bb1f6d4040f80f37c0402839c1d2c1c4cce93edc3ae5fc0abab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
1328f1b0906eb326c6a09d77f782d28c

SHA1
699ad1f70fd053a3855e4298e0cbda9bcdfca375

SHA256
abfa456d4ae9f82bd424b6e850277c03f3ab7239945b231f63b50fe5f9cb235f

SHA512
fbd6219be4a4ee5cf7c002a899ab9b38e659805f851372e7475b26a0599b443440ed5f9f6dfe34bd4b75a0857b60182fc7014d22ff383be71e81c9d57917b7be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
5ba8df9ccbe38aa269c253e9b3e9b9ec

SHA1
5684f821c1932f84c0afc151aa796bab94a1226c

SHA256
4960bfae40bab6c96bdd461aee45c28be5cdeaf0137751289b74da6c8ab13266

SHA512
9db4412bf08f5c372e74bcf02a3e612ecc76aa2fbcb6b8ecccc61fbbb4741a633aa91efbd90975d11934114e8ea875a86f2d4216b19c3e36bca3a178e864d534

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
39a970e36e5a7656b1ebf6defc97d8cf

SHA1
56bad735a94e7da3db746374b82ec98c9698485a

SHA256
409a195882dc4b1477cad6a9703f8385bd9b4eaf104ad681309176d856e99052

SHA512
dc325bafbb12ff291856e50b29932c9335b5fce62404a151b910ceecd430d3710837162b84794d489d1225ec325e11d690761e593e54eb44babb7baa099a0bff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7a303feedabb6661a56bde09ebfe08f5

SHA1
19e8fbdc7649e7204e9becf8fcc0df955912da3f

SHA256
dd602dabbec1d98deb9044544794ea01d59152b41a820c6448a5ce14b2e7e678

SHA512
5a59bd190c295a6bcb3bbc32b981ecc90738aaa502cace585451c66a10206a1aa149a6622e750de3af598872816f923affc4cd773d56ac40ec4081f9d08edbea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
557a41e9e691e1e15468fbe3f1b9ebac

SHA1
611864514ca43d2a0cff8814b451618a329d6291

SHA256
b077a19201138bbca547af11e8b6a61c79edb7a10b712c3c5d06233ddcda42af

SHA512
baa896b838f4ebd2591cd736d05e6753454d00e02feec0d49a39dee0033bc5a17eae25d97bbbeaaaeabfc6121749e8bc66d2993e7f901034d4c942858639a408

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
ac9f2ed86a5318c29ff8197e5f76156f

SHA1
443f0839237ce1f370fc2b76f0e19dbd4c064d1d

SHA256
c11d364192f72b3befb260f063a9cf7c78f00770b7f79f0bc28d752aa2760a8a

SHA512
9fc61c3f5bcc2861eea18c2f69810ca497ec36a9a413ad2c23b53d24e75accc3fabf2594b7b6f9ceb9e58bd170b85e52ea3bd0a35ea220530e2f6470dd729d78

Download Submit