e001875810e8140f5eef1a7dd58df8b2fe26268e85ae44b3003ac571193fe778

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20250129-en
resource tags

arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
submitted
08-02-2025 12:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_c33a957afc263bd388d806eb8d40ebba.html
Size

86KB
MD5

c33a957afc263bd388d806eb8d40ebba
SHA1

80ff797386b7d56fc8822336eda2b4914f33d43c
SHA256

e001875810e8140f5eef1a7dd58df8b2fe26268e85ae44b3003ac571193fe778
SHA512

14349a210d647951b06f0cb4f46f5f6f86b4f434ee2758c0523b6aed2422a49e4510d5ab003c2e96dad097e8de39e138cbf4f63e44c5f6543cd98bc755e0fe26
SSDEEP

1536:1v8JleLVodBhrGodBhBocayQt2Na+arFFFyTDsgnB2HGG9aeu5Dd0Jjhf6gZwxy+:OuVodBhrGodBhth0c51dkdC2Myatqm

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1852	msedge.exe
1852	msedge.exe
1672	msedge.exe
1672	msedge.exe
3636	identity_helper.exe
3636	identity_helper.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1672 wrote to memory of 924	1672	msedge.exe	84
PID 1672 wrote to memory of 924	1672	msedge.exe	84
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1592	1672	msedge.exe	85
PID 1672 wrote to memory of 1852	1672	msedge.exe	86
PID 1672 wrote to memory of 1852	1672	msedge.exe	86
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87
PID 1672 wrote to memory of 2176	1672	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_c33a957afc263bd388d806eb8d40ebba.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ffc230946f8,0x7ffc23094708,0x7ffc23094718
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2692 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6092 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2116 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6168 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6552 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6552 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4112 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,4991482996780946137,6332170332746938185,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4696 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3572

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2192

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4580

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
bc29044ff79dd25458f32c381dc676af

SHA1
f4657c0bee9b865607ec3686b8d4f5d4c2c61cd7

SHA256
efe711204437661603d6e59765aba1654678f2093075c1eb2340dc5e80a1140f

SHA512
3d484f755d88c0485195b247230edb79c07cc0941dedbf2f34738ae4f80ba90595f5094c449b213c0c871ade6aff0a14d4acfe843186e2421ccbad221d34bf54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
709e5bc1c62a5aa20abcf92d1a3ae51c

SHA1
71c8b6688cd83f8ba088d3d44d851c19ee9ccff6

SHA256
aa718e97104d2a4c68a9dad4aae806a22060702177f836403094f7ca7f0f8d4e

SHA512
b9fc809fbb95b29336e5102382295d71235b0e3a54828b40380958a7feaf27c6407461765680e1f61d88e2692e912f8ec677a66ff965854bea6afae69d99cf24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
20KB

MD5
2ebfdbd309ee762211b4a2ac39708c4d

SHA1
b002922c672dbe1dd4caa02af24d0b1e7da616af

SHA256
54ae97d445b166859fe3ba6241b97abbac0aa0d158c72352b774d60ba3e81797

SHA512
d1687b7a6da07a72963c96a1e85661046d3d3c96f88445302afa09721fbe211a5fb8881ff14b346b0ebe8a20f5ced21979e9f58e256427e57b85d565bef17720

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
1ec1e5a1b0fb168e24cf7e8e9e54b3bc

SHA1
f791dd38d39f8b927b7485158512f7303861dd5f

SHA256
64ed9ed410d7ecddb5cc8b7192fee6b172c24f5efbf38c967d2eba020082696f

SHA512
8a14c536d0c640f567ddcc4dda5328b96bae145a9b8985a1786b3e43c0a4814c57a7f5d4ed0df4f59123135aebc89eef09cc12242250b807a3971c0d021c9c95

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
22c092c539a645cc6b2fc1353c43d2c1

SHA1
42adf6dcf52274482def60b7d56782253c33f48b

SHA256
e529fd416713f10731c579c1bb613b25e89a758f0c464892c38d9f59311bfc9b

SHA512
3edae1f8e4fd12563fc1a4aa5031536ce80530517872a46aeebe467d04e90c03ca12fc3cb39fa767b99eebff168337b6a621e5c8ff701cbbc2315c318bcf34fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4345363ba60f4338ee89d56961e8aa71

SHA1
54b53c2af0e4c303ecebb711512e56b41ae0b5e7

SHA256
e8be49478840348a24bcd7e223bdfef870da9e611b1a931515bd125547667539

SHA512
0328b149c983966c1300c8935226920f1344e0afb1a83a3874899e0337d05630dbc38555201361a25b545ce5f9caaaaaf91600ae4adac6e7e90727d1325d063d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c1f6c86accda3001b0aeabd0574d4ef8

SHA1
eadeca67d338dd39bfb9f63eab693b72122d6c3b

SHA256
48e829faa317b5e492346dbcc217798bc3c5bc423c12b833918fd0b7811b8215

SHA512
59009d7b2cf650e120b668aca502d7ec200f78588d0d496fff3f24e488c639398c7a951bb52dda9ba00849173a0662bb4cbab5d815cbd8761d7d57de87a39adb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
d90b8b2c5af73761807d22d7300d2eec

SHA1
6e88dd43f22806d2aae28bddefc40af4a176dcac

SHA256
084f92c59f8fcaa4bd24d5adde790d4402a4ebae52a4328f8c012fec943770ba

SHA512
13925132433dfd165c72dfe997ac7a5fffa6974a2bda498b1cfa05430327141aa0a06d0d2c1bc62c459a700b3c00d9f2584b313a6cedd1f29495806de07cf9f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
3618805949f2272770541258523c9e5d

SHA1
3dcb50389aadd7d0eae34238f146eccc6f0425b2

SHA256
7954a88afe1c9c7c1a2a510238b1e1ae211d46f85a6efe7cfcf5c6ca71845c83

SHA512
aa0e32d332aa928f80970de3e73fedb661e23c48bf3ec969d84fcaf3059a19a81b3ac6a443be4a1729041e087fcf2a098f4ee400fa9b54ef7b4dfead3cc4f7f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
cbadf4047847af6e0e7f503cb1765277

SHA1
d556c200d8e05934d403e681b83f072ef185bcfa

SHA256
25436725f17e3b7ac90e100985eec3dad9254f20d3b20292082551da7068dcc8

SHA512
08f9629021e9db20c2db4ec23775ea0497f608475d26ca3488c42bf00d3f3ff6319af21018503ebad92cc9d40710d1e9c6a9f2136ff6b0ca4ec4b61556baea90

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
8bc69f97b9c41b72f0f07ac713b90a05

SHA1
d5a6497426942bfe6a6e60a93984f35e1d6f161e

SHA256
4a3c5884730ef4c6925d3cad6cd1917c5f82336cc8545ad5abbca70054c30ee6

SHA512
e20741c44ec8d289d90283d1704454e99fc14e5113c0d135ed68613224437dc67c875063d58ccc07c3891e163f2ad3b65bfecd1404bc4b285c9f0266c2fa4a9c

Download Submit