1dfb3654d44abcea511bbd3b0b914e4a492c496750afcee31db9b40f1cd6ac62

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08-01-2025 02:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_87464fc11f1593d63df375d776edb1cb.html
Size

69KB
MD5

87464fc11f1593d63df375d776edb1cb
SHA1

cd2626a48f71f51ff0e19f4b99d36c973a148c5d
SHA256

1dfb3654d44abcea511bbd3b0b914e4a492c496750afcee31db9b40f1cd6ac62
SHA512

5475eec26b3ba2247303065f4483470adbca8dfc1016f979887c917e6a29b5f60f18ad54c13c38b6d889778d67faebe641ff79b878334d8d1aecff88e63a72af
SSDEEP

768:ljbCZyfYJtwdX1lTxdy7dHrwdWNLnBnWWiSvxe8NJmARxrv1LoTgk0D2Mfw9qL:lXOyfMwdXhdmdHBNLg6P7xrv1LoTL6Qg

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1840	msedge.exe
1840	msedge.exe
3336	msedge.exe
3336	msedge.exe
4320	identity_helper.exe
4320	identity_helper.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3336 wrote to memory of 3940	3336	msedge.exe	82
PID 3336 wrote to memory of 3940	3336	msedge.exe	82
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 620	3336	msedge.exe	83
PID 3336 wrote to memory of 1840	3336	msedge.exe	84
PID 3336 wrote to memory of 1840	3336	msedge.exe	84
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85
PID 3336 wrote to memory of 544	3336	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_87464fc11f1593d63df375d776edb1cb.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff829c546f8,0x7ff829c54708,0x7ff829c54718
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4668 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6472 /prefetch:8
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6472 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6384 /prefetch:1
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,6968695452692416428,3590126411236205976,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3088 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4796

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2404

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1932

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1804

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
dc058ebc0f8181946a312f0be99ed79c

SHA1
0c6f376ed8f2d4c275336048c7c9ef9edf18bff0

SHA256
378701e87dcff90aa092702bc299859d6ae8f7e313f773bf594f81df6f40bf6a

SHA512
36e0de64a554762b28045baebf9f71930c59d608f8d05c5faf8906d62eaf83f6d856ef1d1b38110e512fbb1a85d3e2310be11a7f679c6b5b3c62313cc7af52aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a0486d6f8406d852dd805b66ff467692

SHA1
77ba1f63142e86b21c951b808f4bc5d8ed89b571

SHA256
c0745fd195f3a51b27e4d35a626378a62935dccebefb94db404166befd68b2be

SHA512
065a62032eb799fade5fe75f390e7ab3c9442d74cb8b520d846662d144433f39b9186b3ef3db3480cd1d1d655d8f0630855ed5d6e85cf157a40c38a19375ed8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

Filesize
215KB

MD5
d79b35ccf8e6af6714eb612714349097

SHA1
eb3ccc9ed29830df42f3fd129951cb8b791aaf98

SHA256
c8459799169b81fdab64d028a9ebb058ea2d0ad5feb33a11f6a45a54a5ccc365

SHA512
f4be1c1e192a700139d7cff5059af81c0234ed5f032796036a1a4879b032ce4eedd16a121bbf776f17bc84a0012846f467ad48b46db4008841c25b779c7d8f5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
480B

MD5
d51341dc3f0139fd5629afc8b8282179

SHA1
55f06814bcaa79dcd56dbea7c1fd87d5020453d3

SHA256
469375aa393cd2fc23b07a446ee657a27f2a6ede653dcb5b2a60477035b20f80

SHA512
480054eface4316a8f7b7ba238027ab9fe6fa0b47b397be982fa91b5edc9ffc65501251ff64ee53fbb076949d9231fbfdd202aba717f6a7934825bf6dd6ec637

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
c720d5e6992f7c668fa507ff35bbab6c

SHA1
1c8528126d5117c6f087fffd8a22373a51f987c7

SHA256
c65f82d4fae8cdb813c7720925e77a701b0cd67046ab7df7f9e17a29128fad4c

SHA512
0de60ea94fc6a95995c3249339c2c0abb124a68b2711857a47fa162c5d1b0ab38616222aa6fb10c4d33831e6dfc48c25587799cf6fedecf729981716c2b57e06

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
6af5b527b9e1bb85d7887dfe4296919c

SHA1
9051843d354883abfcea356caf5d3bfb51524370

SHA256
46a01fe2373ee7ccb793c56eeeffbe756babecc3dfd05213c829410c1a3e7c83

SHA512
fd09100d99e31641141c3e53597c1f5b55048147ae0245d4eaba5a061ae9455986e1e4f7b921146aa2c3ab853280e508051daf6305ce295d2a4bb4e5635c6542

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
d9b063f743eec97380f31f00d9c229bb

SHA1
906db5260afed0e17c950b8ada37087427c4661c

SHA256
5c17ff94080da1f512e6e857ad5891776dfc9e76af9293b508c1d93c14120a28

SHA512
9ea3da3debac12a876dc25e377ace2ae9329f3ea52508e12609534959dc66665e435be5099c332b48d4d7bd56e1ce437eaa16bdcc771581607cbd255098399e0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
e16f86e542a60d12e854dc27ea951188

SHA1
776022f4bca91f625f063360ce785402e78b13cd

SHA256
26982101c4234a65c907f46b8815883838bd2ebad3693cef5bee910f1460a49b

SHA512
c09b58626e1ebd012949fc55d21a5ec6f41ae24d041a164559ef2b6f5ecf06247b9814c49e72ca6826977480f2590d42e3005ecfd260ceb9de6c45359df8dce1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
19c918f47681c6806435dcefe27051da

SHA1
3829ebf3569d3f19db36a144f8c0a2d291a2e3e4

SHA256
5d411c01b41ba2b618659820f8c292cc268c5ab3c5ad86dd350106e0e7894832

SHA512
c7eabc4bf77ee8c45e78ceb528c6d5e9cc7ccb096d7017b721b8739e1d261f81794ea125793263e470488e38e84c6b5ce52e281bbac5e72731eb9845e23a3eb4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
51acc37be1ad32e81a00ac304f7b123e

SHA1
7991af4313340490ede0d145fefb48d8654a94aa

SHA256
4909ab8bc49333d0eb957acd7803df8811ee46c5d4536503262fcbf88afa3728

SHA512
1e46488b76eed9941e5646c45dc71075cd633ae13b21796dfef358fd1d5d300c3801f1f74b04015ce039ce34f5d50b069802c22078a468d7be7c380d5a4dbd59

Download Submit