1171b69542dfa817d4123e2a2fb0e9a88fef9d291138ce3d062ef25804b609da

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
10-01-2025 02:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_d8952e9622c3789a6798da3a72876283.html
Size

180KB
MD5

d8952e9622c3789a6798da3a72876283
SHA1

0ed50943cfa9d540a4a46d926fba2732fae0aa0b
SHA256

1171b69542dfa817d4123e2a2fb0e9a88fef9d291138ce3d062ef25804b609da
SHA512

f0d44768b1dee35346593e83b635295645231a2ee24215ad3a2fdaccf8a233861d84239d8d2d53e56ad46595c7b0698f6330b51d6ce2c2310f8578bb86a4c6dc
SSDEEP

3072:MLNWKurqDakvWyeArnirxCCF/3kwIbemJN:MLN3akvNnrniBd0

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1036	msedge.exe
1036	msedge.exe
4208	msedge.exe
4208	msedge.exe
1472	identity_helper.exe
1472	identity_helper.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe
4208	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4208 wrote to memory of 2832	4208	msedge.exe	82
PID 4208 wrote to memory of 2832	4208	msedge.exe	82
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 3900	4208	msedge.exe	83
PID 4208 wrote to memory of 1036	4208	msedge.exe	84
PID 4208 wrote to memory of 1036	4208	msedge.exe	84
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85
PID 4208 wrote to memory of 2456	4208	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d8952e9622c3789a6798da3a72876283.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd407346f8,0x7ffd40734708,0x7ffd40734718
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2840 /prefetch:8
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5464 /prefetch:1
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:1
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4968 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2640 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,2374741230001930035,17029440037738325900,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6376 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3040

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4684

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4312

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Filesize
328B

MD5
ed0f0c16db7322ad7b49130b05834019

SHA1
31d146f65c4fbc93ed302bf90d5ea9aa5c89f65e

SHA256
7bfc323b85409d9bea71a401a3a55a9e28c8961d8eaedbe64bd9069f875b9524

SHA512
b0973956cf9ae939f736a53f2daceb2f9fe46af75094d84830031ea8856075dade551af1e070c9ddeda4456b305bffca10a96ceccb0b9a04929fa7febb6cb7b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56a4f78e21616a6e19da57228569489b

SHA1
21bfabbfc294d5f2aa1da825c5590d760483bc76

SHA256
d036661e765ee8fd18978a2b5501e8df6b220e4bca531d9860407555294c96fb

SHA512
c2c3cd1152bb486028fe75ab3ce0d0bc9d64c4ca7eb8860ddd934b2f6e0140d2c913af4fa082b88e92a6a6d20fd483a1cb9813209f371a0f56374bc97d7f863b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e443ee4336fcf13c698b8ab5f3c173d0

SHA1
9bf70b16f03820cbe3158e1f1396b07b8ac9d75a

SHA256
79e277da2074f9467e0518f0f26ca2ba74914bee82553f935a0ccf64a0119e8b

SHA512
cbf6f6aa0ea69b47f51592296da2b7be1180e7b483c61b4d17ba9ee1a2d3345cbe0987b96f4e25de1438b553db358f330aad8a26e8522601f055c3d5a8313cdd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
a22ee76705643f7fa91c1752bff540f2

SHA1
5b0185bec833482678a2ed740896b66b071afcea

SHA256
7ad3cb78ade3b72102982ee6426aa3749369bad48e358ca830e9e9188983ba97

SHA512
108a2d0c22300cfce43f5cb265563bc7f6d20084cb68384348b9ba79455b14f25e963b333fc18a290e0d39ae75783bd2ea33aace1b75e5c6e039eb6cf816b54f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
5228bc089b521526d5d71df1e631adca

SHA1
265f225e2fa3a6368c48472dc7fcf4e49e4ed03c

SHA256
57678d062761a32f795f5d48ac0844636bf7e37e0b21c992e514003282980bd3

SHA512
45b61c4dfc0ab408bc1a7ae97c0657627bcb2d6a1fc632ade1a4d3d9d6d297aa49a04762035a245277245b3048847828fc3daf670934763777b556024265a562

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
78a58a32b07debf5439cde8776420601

SHA1
cac45a925247166361d900539654947a45b3435d

SHA256
8790ed07cf5838ed6b2de14930222257e656afb8458066cd822610e8ea5b07d3

SHA512
f64d3f34a9bce3cceffdde09dcab2c877b97e0c7878f05940c79950df19384c1fd1aee98e4e05ae19718dfedb4e1b2e3b595d1bbe579c8bf4851212b1fad2bdf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6023ed974354092faf8e865553d945fa

SHA1
ef88fae354d452da58050e68595ffc8ea5f755b9

SHA256
2850235d4f87b3a937aa483a8883541f4e5e804e817693c2b3341893d6f94254

SHA512
9a15773b6826803cd58a970fd4db780ef86629a55a7b8a1a42dcbab4fd2c2b0ef3d7cb1bd740b499aa8dae5ce7d7acb3f77c4528d2cc08bd5ba9309440e5455f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
0064dc11839a11087be7258b84dc8679

SHA1
051a89ed177289a86decf6cb26f7e6b499d94a71

SHA256
8620bcfd034a410b4a4d9946888df0d5ad2c066cad57f41e5b0fe9425b019807

SHA512
644880b102c629cb506dc16a8af6ab890c63c966533144e40ac180ad206e4fea273180ab5f7c939b28c2c523b3a6a5c61bc66abb0e5c213e46ce6d733756bc7d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
795b4d411047a04f20e5fb21953182e0

SHA1
b794f61cacf80c12a4e0362c5721091ccb49da17

SHA256
7f4e2474060bfaf7d6fbe3a572ab2d50826267fa5dc81994042aee6b85585a1f

SHA512
5a0409184cacbde597dbf8eef3a0a905d02b05e481386a18474ab2a3e6ff09688c12f0602e1df07f4e2cfd77d1906c9608118369c53046607da5750689cb1a40

Download Submit