d405bb433c1af6ed73be53fac8dfdbb85b4fe5a05874e9b0f57668be022a6575

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09-01-2025 08:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_c305e509c68ad0259446ddfcd0b736a9.html
Size

151KB
MD5

c305e509c68ad0259446ddfcd0b736a9
SHA1

cd56471eca28b702cbc67c394d46a19d103f9888
SHA256

d405bb433c1af6ed73be53fac8dfdbb85b4fe5a05874e9b0f57668be022a6575
SHA512

fe5600acfe358f71bbcb8431bb08e0203a41d174342589177cc5ce57f8ecdde00803b2b047834a2c6b47e775b625afe3b8ea199b663228ec617e7c6356527fce
SSDEEP

3072:veFBSF3z2UP13G4k5QhLpOatVnbJxp/fNbYaaLStRocxWUu/v66sbsGon4G59t97:iIr3G4k5QhL8atVxfNbYaaLStRJxWUuH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4624	msedge.exe
4624	msedge.exe
3544	msedge.exe
3544	msedge.exe
2196	identity_helper.exe
2196	identity_helper.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3544 wrote to memory of 4600	3544	msedge.exe	83
PID 3544 wrote to memory of 4600	3544	msedge.exe	83
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 3044	3544	msedge.exe	84
PID 3544 wrote to memory of 4624	3544	msedge.exe	85
PID 3544 wrote to memory of 4624	3544	msedge.exe	85
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86
PID 3544 wrote to memory of 3880	3544	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_c305e509c68ad0259446ddfcd0b736a9.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffce3ba46f8,0x7ffce3ba4708,0x7ffce3ba4718
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7144 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6712 /prefetch:8
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6712 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7164 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6844 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6648 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6676 /prefetch:1
  2⤵
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,18099244422158918415,10174714409823803423,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5392 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2184

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3204

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1288

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
99afa4934d1e3c56bbce114b356e8a99

SHA1
3f0e7a1a28d9d9c06b6663df5d83a65c84d52581

SHA256
08e098bb97fd91d815469cdfd5568607a3feca61f18b6b5b9c11b531fde206c8

SHA512
76686f30ed68144cf943b80ac10b52c74eee84f197cee3c24ef7845ef44bdb5586b6e530824543deeed59417205ac0e2559808bcb46450504106ac8f4c95b9da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
443a627d539ca4eab732bad0cbe7332b

SHA1
86b18b906a1acd2a22f4b2c78ac3564c394a9569

SHA256
1e1ad9dce141f5f17ea07c7e9c2a65e707c9943f172b9134b0daf9eef25f0dc9

SHA512
923b86d75a565c91250110162ce13dd3ef3f6bdde1a83f7af235ed302d4a96b8c9ed722e2152781e699dfcb26bb98afc73f5adb298f8fd673f14c9f28b5f764d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
215KB

MD5
d79b35ccf8e6af6714eb612714349097

SHA1
eb3ccc9ed29830df42f3fd129951cb8b791aaf98

SHA256
c8459799169b81fdab64d028a9ebb058ea2d0ad5feb33a11f6a45a54a5ccc365

SHA512
f4be1c1e192a700139d7cff5059af81c0234ed5f032796036a1a4879b032ce4eedd16a121bbf776f17bc84a0012846f467ad48b46db4008841c25b779c7d8f5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
465e60a821aba54b320bed6ec0c4b1f0

SHA1
8c5eaacaf51c6ab967d5f261bb9ed1ab2d39aaff

SHA256
8c4f3e1e0c0c13bebb0e830a8d35f01f89394f626b6e177a31e9fec67d2f2b56

SHA512
487f2ae02c4169a712cbe3de6c720bffb509b23d8621a891d417c693944fe17f531af61060ac24d573948485c9b117f24980ef15e00c4307b13ea4d616bf85fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
167c4c2b235ee3391eceaf31d3d690b9

SHA1
bc50ab92623ba29a74e0f9f8594d4255664401a0

SHA256
7bf99abdd8cf3e2dadb22887efec1bba05c0808d9d9f3ec8d64d096959cbba19

SHA512
9a70aebed9e016cd8e3fe79a3017d94cefff7360ebd9cfb4a4caf4839af25e6f002fe823dc239b85e6f46cab4d44dd50dd2ba02703f16f76da0b626bb78f0131

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
15f492b97495ce687af586fbdc9a5a8d

SHA1
db87e6d74ba3de0a64ce7a33fcae95d852b434ec

SHA256
5469b471e8157de836d5505ef4af15c58b81d92c23fcc278dd86a31ae027aea6

SHA512
1c88ff660f3236f0ed5e73a37e0c84700cba743356259ff9cdbc1d940b05ab940635af279a8164e4fd59c227ea23843d6b9425c11895da0a8270e4c86ed76930

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e31c12d9abea00e9ec51d0b4aa8e358d

SHA1
a4b5fa8258e90850c6faea7ccbc8cf6b752b2237

SHA256
7f9a423d4d414de3e80ce0644ef9559544678f0f0cd3dab6076cadfa420414bf

SHA512
7fca84064de87930412519e00ff81ec6515e2d084ebfa774e7abfa2465dd89dcb48581f99294aa190ca091436e70f9ea88e9801638a660aef63112097f11313e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c80086fae2d668f4d3425056841583c2

SHA1
d51d6f82d3c0466b65634097153bd9d534a48968

SHA256
6949d1022d8bef9dfd07ebebdf916cf736b899756c685617d6bb00996674dcb8

SHA512
27b1b35b9a743a36944975eb4bbffd6e6922ec890019a4620194fe37b7fffda927d2f5892fcce35028a79c54a0b8867a2f44d4aeaf80a8810df56184b62d5f92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
00c7c7b23beffc70a7d2738325c3dd8b

SHA1
8bf951132e0cbe788ef8e9f812eeabe57d1a65ff

SHA256
9cb0f64d21faf26c334d9e68266ec23d75045ae3dbd919524b46c27ec0108094

SHA512
c9ef79ff4bc7e03cf8dcfb7b70a61fcc4dda6aa2689a7ec649a4ac1209384e1f162f6a7b801848149bcbb2442f576fb04e9708bc12f9efd8e900ca26c4041680

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6d853002093b8b1528d4f856b193fd3f

SHA1
a583b12fc7554bd3097e224ad1643eb9c2eb69b8

SHA256
30da649537e6a0a60a43e310b8a9624796335999a4974efa13efe1e0b6265027

SHA512
1d91e8559c03c7a1beb51544f0782389805a8da6a2a3c4711911e4d50b48a22a5194ea8316bca69c9f54f64a8351ae24164f87a536f947db14ee7e3ad069c55f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
3eb18c80c14310a23b1c905d433c4c7d

SHA1
758e7581f6a502a1b864a7284bdf48b3e5922f55

SHA256
d1fb466b59af97c9c39c45a798edcf519451163dbd788955d0fb98fe4261b50c

SHA512
c417c27db22b523e2bfddbde11ba411d252c851955865fa614a8a0e3ff107da7f2bab43849497ae2fa1a282311555f1bb131fde57bd271259ca63e42e0d6f6fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
862B

MD5
31135c88db4c53a6bae9d4080cfa016f

SHA1
966f1a5b6e54de0bc589b7478b007cba59385291

SHA256
3b1bb75fe175d77dcd0cc1019dce41e30109b8cf05f1d54addc38a5c5c3d4b47

SHA512
27f347643dda3e46217759c4e2533c30013f81e58d4b2c20f6323d182574b0ee17606898a799109c6014cabb33ee7702335529a0a99d338aa739a1aec2842748

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5879ee.TMP

Filesize
531B

MD5
c0a90d354026ca26041212951b04da85

SHA1
98c8e6c5d8c9d96ac554f5695cfd45362eb89920

SHA256
46dac1cde1d44bc9e66d10c91eec9ad0723f45eb0b31174c3bd2ebcc023661e4

SHA512
5c8f90e7abafc346571708e550f79200640208417ef3bf2a64383559789f08cad5726c11c3f518631fb88d56c4d9fdbe93795d04d295d4a68a9ec963b37ec22b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
1a069f859f7777900fb23ec556915be4

SHA1
cc5430cea678fb50391e1f1f02d0000ff8b26f4a

SHA256
2dceee3865df035ac99cac45ca49fbaaab75e11e7e533cb7e1db8ea9500b08fc

SHA512
93eeb0265fe507386998ef366be3824e8c4ee2a1bd858331e8a09f9f281fcfdec079820dcf08a962bc8976a223df05199038227448539d3d3ca148e56eed9fad

Download Submit