4fdbf3229160cf68fd059b3fcdd309d5451cdc964bfba0ca50f18f1449bcec70

Analysis

max time kernel
146s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13-01-2025 11:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_285cce36f9d1a1c4aee7f0eb00fef03a.html
Size

137KB
MD5

285cce36f9d1a1c4aee7f0eb00fef03a
SHA1

61c0561f67234f4cfa3053b94858bcf7e883f130
SHA256

4fdbf3229160cf68fd059b3fcdd309d5451cdc964bfba0ca50f18f1449bcec70
SHA512

0c720f06509847c78be47826eb471d454723da606a2049d0beaf548e321bd03b1dce5171b75c4f0e34621294a9b4b18590f4c639a3a08dc3467e75d5141de8a0
SSDEEP

3072:Zke7QHXnGoduhMFR+c4RJGm0rv3ClPHRuwSn0QKnqHJ4T:Zkecn+M3EHRuwxp

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2304	msedge.exe
2304	msedge.exe
956	msedge.exe
956	msedge.exe
2932	identity_helper.exe
2932	identity_helper.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 956 wrote to memory of 3340	956	msedge.exe	82
PID 956 wrote to memory of 3340	956	msedge.exe	82
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 3892	956	msedge.exe	83
PID 956 wrote to memory of 2304	956	msedge.exe	84
PID 956 wrote to memory of 2304	956	msedge.exe	84
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85
PID 956 wrote to memory of 1044	956	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_285cce36f9d1a1c4aee7f0eb00fef03a.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9b00e46f8,0x7ff9b00e4708,0x7ff9b00e4718
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6352 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6048 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6792 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4084 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6584 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,14708798289323045257,12028350124987668747,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7028 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4892

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4596

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b8880802fc2bb880a7a869faa01315b0

SHA1
51d1a3fa2c272f094515675d82150bfce08ee8d3

SHA256
467b8cd4aacac66557712f9843023dcedefcc26efc746f3e44157bc8dac73812

SHA512
e1c6dba2579357ba70de58968b167d2c529534d24bff70568144270c48ac18a48ee2af2d58d78ae741e5a36958fa78a57955bd2456f1df00b781fc1002e123d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ba6ef346187b40694d493da98d5da979

SHA1
643c15bec043f8673943885199bb06cd1652ee37

SHA256
d86eec91f295dfda8ed1c5fa99de426f2fe359282c7ebf67e3a40be739475d73

SHA512
2e6cc97330be8868d4b9c53be7e12c558f6eb1ac2c4080a611ba6c43561d0c5bb4791b8a11a8c2371599f0ba73ed1d9a7a2ea6dee2ae6a080f1912e0cb1f656c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

Filesize
20KB

MD5
2ebfdbd309ee762211b4a2ac39708c4d

SHA1
b002922c672dbe1dd4caa02af24d0b1e7da616af

SHA256
54ae97d445b166859fe3ba6241b97abbac0aa0d158c72352b774d60ba3e81797

SHA512
d1687b7a6da07a72963c96a1e85661046d3d3c96f88445302afa09721fbe211a5fb8881ff14b346b0ebe8a20f5ced21979e9f58e256427e57b85d565bef17720

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
194b9ad4be6c253e15ba01d426bb8894

SHA1
48d23186aa473c20b6a42bd02fb85afdab2ba290

SHA256
20502ff4b38a021884b4f9ed09e7936bc4d130392dcd2c5791a71053f9444664

SHA512
83d091e99276eaf7383b6bc9d648d05f8c7bb46f132ab22a67be3ce3898b19a5222796a41a710b5aa950e417592ac837d3e2b348533532b446dec01704ed4817

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
8740b47cffebd5658b59ce9d53babb53

SHA1
e0ea24ac6a6cea060a24588790bba9be85dec9ba

SHA256
4911da1bf4fdd003768b500987954539963b7c77620af89dd2ccfff42e9290e5

SHA512
4e9124713e862afba5762365a80b0d7ab55ddd702e96ebb94cc1d8bfe5d992251316a6cc7210b1684ac4363cec8a9b591dfbd90232e5c60569126fb5276b05bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
5a20ca82222689392d9262e4a39d8f37

SHA1
94b2bd8ceb0e3df249855802c95a7d94dc4318bc

SHA256
a3d78a55aa46fa69a5da370c513a3cb0cd9d71470f735a4fd40dffb1847d9073

SHA512
e7b3e96a988275d861c225405924a311ea26e8c614aa60cdc75bcfa26a41c00107033c95cd3c5143477330437fb9d1fd456c79cfba0e25e7e95a00fb09031a4f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
e1dd9664a297e13e507e05dcec3aeb13

SHA1
4b65a3268270555b71eeabd3602b0061f5c0310d

SHA256
8bc922f42553fcd639182c7ee11fea938c63ab7fe63a66045ca56a209c7b8167

SHA512
297dec6ec8e8f6d970b37521a108689374a3767643e7cb7a797db72d59f6576da9cf0185a6ba7b38ebf344d8de4bc084d9a9f7800973f68b82927ac9e15772de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c7e1fd285ffda8aeacde8c6563f8a58d

SHA1
9c40129edd261cdb582d95180a593f8104b6252b

SHA256
a6fe4167b910af188ea468942b598aa02cc911b89bd29fe17e91fcec0611862e

SHA512
9ab635808e0ad5e75b0ef4c8a1825bf5b9d467e29f9ae34481cbfdc9f1aa9bf8b688a35733e55f340cd9b4194721862e72372d081d455384bcf9e0228cd36d4c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
1105213d07c704b948dc40550fbdfe04

SHA1
0d5d7e5e393a630fce9dd8e442e46ad8c74c7e53

SHA256
6d09925947f6118beec5bb056189c69a7f9c4f5a0b42a80f099ecd1f7f6475b5

SHA512
1e2a605f63bd49bf38f041b39e46fbb0a31075a22b0eedc5061cc506ed4772051d031da5324af96864e372813023fee205382e0cc5d2b1990c90c957e54d0d96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
2430f5ff39af5ed2d2cc91b6abb96aad

SHA1
42360fd17c13f4c6aae2824031408edfef7db7f0

SHA256
6701b8c37a910ec28078f6246152abf8c0f28556e368de737ab959ac360e4e5e

SHA512
31841038531395094b3a67d57aef8595cbe5bad4068ae7c5c433e6472abbc8c0d216f72e9e613942aa543c805f4af0eccd2291ef7c9f42ad21b2c781ac341833

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d7610ea560b3598bfe0d89a8076244ff

SHA1
30265305ed0a0f58fa2a608745d68fab73abd6cf

SHA256
b2bcb71ea365a14d60181a4bd5c7090a60322e5b7a16bf66030a06298fd0c8d9

SHA512
4b1af0c44995d1133a21814334e3f7e7c49125ba680290537cbb73c4566081cb77d164a314d04a51cf4f3a1cab8aa362d56afec9066c10c89b1e3aae4ccae030

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581383.TMP

Filesize
371B

MD5
0d2a745c1b31af0a5fbfa9bc0a151c17

SHA1
743ded58d4ad6b8c85e9ae455bdce85fb5be0009

SHA256
fe516b220bbc2c6744ec666a714a3e27a250856adecfc7cc2584b8483049c4fd

SHA512
d284bdfff622f8b56c9fec5d3f5fead523c7d656ed2f5e0bb08d07ff7ac51358a25b70b7b3c33f724f94b21e327d8b6019381b7bce185e556e1f05d6eb0b4d0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
206d13af0f72d8582df62aa507589c7c

SHA1
1c656dea818604feb935241687d1d097b7a30e1b

SHA256
ca563fad81aae7d7ecc61ea5961ba9fcab61258cf1b0136378fdd4a9eb0604d5

SHA512
adf8595842cb2221f927b703dc23a0447d73218f876d338e0fad7229c5acad37cdbd2a9f188eea31acd4b9664121d8c6de7de1c9dcd8dd232b42436e9dfcc092

Download Submit