68f57206b45ae2b02a608c82a6a25f2d991bfd297b81ee26cd4d97d702b315c5

Analysis

max time kernel
150s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20250217-en
resource tags

arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
submitted
12/03/2025, 02:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_68903c60cf892d0a1eb3fd7ed2e1ab30.html
Size

224KB
MD5

68903c60cf892d0a1eb3fd7ed2e1ab30
SHA1

e6832cf94825f2d242a5a4b0fb97432679759f03
SHA256

68f57206b45ae2b02a608c82a6a25f2d991bfd297b81ee26cd4d97d702b315c5
SHA512

2433e7c73bed580d4d535b3d4b38eb97222e095c77523ecd26bb55181417fee5b654eda863bf53b544bdbb5c849ec93b25c75f4c7c43dfb2279d827c76ff5041
SSDEEP

3072:3HVodJhyGodJhBcQAw/y4/ft4EESLdQIgulIUAK4VCApcet7a:XaPVCA5a

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2500	msedge.exe
2500	msedge.exe
4688	msedge.exe
4688	msedge.exe
5836	identity_helper.exe
5836	identity_helper.exe
5992	msedge.exe
5992	msedge.exe
5992	msedge.exe
5992	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4688 wrote to memory of 3564	4688	msedge.exe	85
PID 4688 wrote to memory of 3564	4688	msedge.exe	85
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 4660	4688	msedge.exe	86
PID 4688 wrote to memory of 2500	4688	msedge.exe	87
PID 4688 wrote to memory of 2500	4688	msedge.exe	87
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88
PID 4688 wrote to memory of 376	4688	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_68903c60cf892d0a1eb3fd7ed2e1ab30.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd972a46f8,0x7ffd972a4708,0x7ffd972a4718
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2924 /prefetch:8
  2⤵
  PID:376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6472 /prefetch:8
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6472 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6504 /prefetch:1
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2220,18373005629238124615,13214654787752982828,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4892 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5992

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4440

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2632

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4288

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6cdd2d2aae57f38e1f6033a490d08b79

SHA1
a54cb1af38c825e74602b18fb1280371c8865871

SHA256
56e7dc53fb8968feac9775fc4e2f5474bab2d10d5f1a5db8037435694062fbff

SHA512
6cf1ccd4bc6ef53d91c64f152e90f2756f34999a9b9036dc3c4423ec33e0dcee840e754d5efac6715411751facbe78acc6229a2c849877589755f7f578ef949a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f2b08db3d95297f259f5aabbc4c36579

SHA1
f5160d14e7046d541aee0c51c310b671e199f634

SHA256
a43c97e4f52c27219be115d0d63f8ff38f98fc60f8aab81136e068ba82929869

SHA512
3256d03196afe4fbe81ae359526e686684f5ef8ef03ce500c64a3a8a79c72b779deff71cf64c0ece7d21737ffc67062ec8114c3de5cafd7e8313bb0d08684c75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
20KB

MD5
162b642946a24839c05530fb1e6059c9

SHA1
077376b7a9f0305600a193d03f7efabbc2aaaed8

SHA256
03c8a9d542b931ca3b2d6a9236ab3af3f4897171727eea729d75b1bfcbd472f2

SHA512
fc77d2d1e7797f7586dce55e85046bd490c8821b8edef88a014ea5e7c5da22c258a9133e4fc303e134c2778e4005433f876e667c93187d399dcc1443695c3ac6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\507a0ed4c76794a3_0

Filesize
243B

MD5
dc9a18a1b64503f171afd0ebe6497a2f

SHA1
b0c6bfee31662c9369cee6f8768e103fd8a86cb5

SHA256
a226719455a6aaa711f7920bd38f776b50a0df1cc12f1e94f71a46487d1bfaf7

SHA512
d90d8c0360a17087429c55f5aff6c99bfbc99ed6ec7c441d6faefcc2227b8ff140b382ca35b9baeb25b6b65945faabcf05ab4cb972e38f58056ccbe388da16a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
6030017d50f93fd764f8c4291f345e02

SHA1
a780243cf679dbfbc27de55a743fab50ec1ab3eb

SHA256
c3f5ddbd0c089a84fe1eceea00ee3824d76e4d24fcb611ded886fcfd14d6c4b1

SHA512
ebdddc78a2be771e7fa0637c947d237455e7dc73a2e99f60a22325e965a59ae2ed58da6b3c5499a9b6894b2c40d0fb0090f150c74d11e95bad9696738977db17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
ed4855e232151209943d7ada12f36095

SHA1
00be21184f03efaaabb8122afc0b59a62d110e0b

SHA256
5f1ff1e9b09f748dc78d06d756786daac0ba57efdcd422315381b8465db8c00d

SHA512
94981b6a8fa8bdb9fe8c0d5873e1a2cc8ea466de1b28abc7f823de6ca9d63d40a972f58672218f08db2164d9f63d10b2a9cea6b63746d076d7a92ad5d4f33a7d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
8845d3e030df2b0c545b0b7f3df9e197

SHA1
366c8dcddc580db6db2e3f8bea47776aef5eb0b9

SHA256
22269e3da53cb2fbd1a5d2852b505fc84707e5d149858d9a0bad777ddff80223

SHA512
14d96bdd435ceec3e7f51251ab1e4c76ea91fbc2884fc9c27e99c6ee2c1c65835bc2333ca9384f324ff4239cbf0a7eec2dda4e736e5658fb3ab76ab493b679ad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
f7dcf0146d0dd3a905db13856ee66a39

SHA1
1e84ce556f759506a975ef9a9fce10d45aa626cb

SHA256
f1a3cdd2de047153e1069af26d1d227b0d48a6fecb97f8eb4489cd114c818cc8

SHA512
05fa80b3e2d5e4d8773388a81f9403dd70385801d200cb99757e17e23243e864b18a205875df32cbd4cc7c6e4e96494d2aa0984c717e8cc8c920575fd93eb720

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
e41c64d9b72f4391f715e4eaf1f02e2f

SHA1
459e194361da2dfd9f070250443c36487d8aab46

SHA256
4853af540e5c81cbf0056b2e9a22ad41a543950321318d4a0f8e73b8d7ce11d1

SHA512
d48ce7d19990bb10030eab3b06b10fd9e243a87dfbdfde185142d441e2deb61191630d78be60acaceefbccd85cc731df294ae9c54e0b576472836fe53d67b9a1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
c7fde148d19949fa165e8ad97538cc4c

SHA1
f5adf573103c642b78006d0736299c3eea2fd064

SHA256
4b7bfc32873d6c063b71a4c8532e361d9d3614407cfc2fb1a01252783cfa5a0e

SHA512
77c680f43745bbae1bdfbf64d3bd17b46b8b0fb0f2d77267e61f60df135bcf31120a3f38a3006e2d59ff0c74e3de4d6bc56c3d0ba4defba6c39badf69dbbd130

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f6888e0b2cfab4cdf1def96e2b59dd48

SHA1
e87b604729e2bd96ddae7363414af3af20d22740

SHA256
8164a207d3ecaf2881290bf3f8a999c8f4774aa9683696df2b8b9b03a79f45fe

SHA512
6ef642bc26a60ca2d3aefb46311134920d92df06e6a7b6ae6c8c757d3fabd3f5b139d991e23b8552b46b6965c50214c16545f905d62b35f636b5c9552b900475

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
7844351a8ef159f3b3d05eb3c51e7276

SHA1
af384be9dbb211d25f64b98d6dc6d9294bbc46cb

SHA256
c709d62b42cb476f22949146b294d34ba4c97f78398242a4f70c688b4ec3213f

SHA512
1eed5595260aee8387cd6c9128f7bf7a0e9bea828899bf270f54fce8ea545606d97de7306c82a7d4a97f5b30f66d582005ed3244599695309cdb0fee4842d45a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
533B

MD5
36caba23c200f19977fdf8db32f2814d

SHA1
c1128cf932adb17d7394338629ebf6948372f550

SHA256
95bb161053a910da1ac5ff3f135682cf99fd2d581c2a7d42815a9064740f055a

SHA512
708b1afabb1dee42a05756afc5854205d2e43d4f4818a691f63130f344154508fcf89c38e2e7d798613d5c44a09c1ba6e16cb53ea0e5bc99628ac2fa304d0f25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe582e7d.TMP

Filesize
533B

MD5
c2024187e5429fb678a6553f0422c2de

SHA1
680722b7467f8966f3c995ec65d89627a40a7d5a

SHA256
905725fb106af9a884a00a8c25638e6e10b2b43aa0ef8bad92189a4511873f59

SHA512
8aa2f56d0545857d4f76ab21e122f6335df37fe5680c83159164c879f87f2fc1a8f2eda072ebbcffda732285469b1d91bfbddf06724c7d36fe0fcb6475236995

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
014ca4cf41d449e80f776155ad43645d

SHA1
7e9b2af52aef368d1b6bfd6515df293ec0095f3a

SHA256
1a775b66383171403cf1a0da85355be837f96c0899cfbeef84269823b100e012

SHA512
49cb6566b40ccc651df23659a381b361830d9c89e687d68da82c5dc8eaa928ea8954ea019bc8051e8f54aea08de5c206487620c56fe8b54c2a53f1f6fa8fc25a

Download Submit