bc4bb1c0e7bb9b61e5161ad9d8f8915a4dc9645665291bd34c8490bcd13856ef

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/10/2024, 16:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

40dff5cc894443add29715daa9b00571_JaffaCakes118.html
Size

41KB
MD5

40dff5cc894443add29715daa9b00571
SHA1

2179a36f687b1efb1380c8aa8bef1c79f3605419
SHA256

bc4bb1c0e7bb9b61e5161ad9d8f8915a4dc9645665291bd34c8490bcd13856ef
SHA512

4a7f53271c08bf77996c150fa8e434544b519cfb98f78482f6f1fc942e83796d504d0edd2dc0412efda0b6b254e1cc14970db0b90d8c9c1c14bfdf3548f9e51e
SSDEEP

768:KlNKc6Hv95OTUE2U1474U3Xolkbm+5V3UeLHDfICKnZoL:KlNKc6Hl55

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1324	msedge.exe
1324	msedge.exe
4996	msedge.exe
4996	msedge.exe
1344	identity_helper.exe
1344	identity_helper.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4996 wrote to memory of 528	4996	msedge.exe	84
PID 4996 wrote to memory of 528	4996	msedge.exe	84
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 3320	4996	msedge.exe	85
PID 4996 wrote to memory of 1324	4996	msedge.exe	86
PID 4996 wrote to memory of 1324	4996	msedge.exe	86
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87
PID 4996 wrote to memory of 2716	4996	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\40dff5cc894443add29715daa9b00571_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd8df646f8,0x7ffd8df64708,0x7ffd8df64718
  2⤵
  PID:528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2904 /prefetch:8
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3108 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,1174519472422344811,14443210069087538788,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5464 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3852

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3012

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4540

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
bffcefacce25cd03f3d5c9446ddb903d

SHA1
8923f84aa86db316d2f5c122fe3874bbe26f3bab

SHA256
23e7cbbf64c81122c3cb30a0933c10a320e254447771737a326ce37a0694d405

SHA512
761dae5315b35ec0b2fe68019881397f5d2eadba3963aba79a89f8953a0cd705012d7faf3a204a5f36008926b9f614980e333351596b06ce7058d744345ce2e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d22073dea53e79d9b824f27ac5e9813e

SHA1
6d8a7281241248431a1571e6ddc55798b01fa961

SHA256
86713962c3bb287964678b148ee08ea83fb83483dff8be91c8a6085ca560b2a6

SHA512
97152091ee24b6e713b8ec8123cb62511f8a7e8a6c6c3f2f6727d0a60497be28814613b476009b853575d4931e5df950e28a41afbf6707cb672206f1219c4413

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2b12df87-6122-4ed1-9dd3-3be0f34bc10e.tmp

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
5ae854fb960d27181d0aeb8673e692c7

SHA1
b2b667ae0b29185e49e662ccbd92054256c8605a

SHA256
8824426e25e01062c0f8c7f95b1ce52cfce97bd91230af1331d0f167ff13a4c7

SHA512
3f3832317d746c91ec45a69ae9cdc2cf0212bf6eaf3ae026cd5e5f5e858ceeb455f689cf9dbd68999451d2ca210a96b01efb986dafca8a45e5b8c54a366cb3b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
da945a89ea43f968ca43ad4808428273

SHA1
a5812431de168fcc4aee54a4d3911beb28924f96

SHA256
2a5d26c2e6babd67149149ca8b32f6a7de6b7aad2f3476c5640cf02aba67c93e

SHA512
2e35c98d1d63f6b27c57c5361a5c74601b24adf94df9a6c9c85f823b8c624cddb36fb8803a4eeb3fc9ea17cddcc86e8afd3ca84af1640d1992c8b27b21864f93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
613B

MD5
81dd7815f2fea7cd233751d21b73b090

SHA1
c754fce472f5b18b6f4792041fde5f68f8337461

SHA256
b190273887475b323f07ad8d5d424274683659cc5443e5bc878648bd72f1db83

SHA512
2eaa32d071f2265e644316d960369e68370584521c3dadc2692185527e3a071090fa9ff10623bc1ea656fba6a4bc0aea2c72b8746fda05bbf15a50f88b136379

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
644B

MD5
9b86ee08ab525600e2ab8b5482da962f

SHA1
7ba5b17b3cd40bfca17402200d33f250da09a529

SHA256
876308886929ffb8ca41bb4ac1bff6e483dc3e680ff884980cf6ccdc409f798e

SHA512
4ac5a6ed50c11be33d5c2f4e94d18fc474b33762615415f44590d56f1e7111133490895460bfa38dc8ca2f2cb338a8f289ee2e6f2de8f099b950e71da31395ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
98287bd26fd365bf95349da8ee614a46

SHA1
8f818fbb5b7f36cad73b685444427f091d09c161

SHA256
874ef76f5dcf42d8fabd28a192ea55b98117a0ea67d0d5aa22d5a5174f119c30

SHA512
d47d688fad341d30c88a5239f25299c836f66ed8986b3cc9873f6bbc8688863edd1eee5e3a8d50b6cfe19f8c97fc2c08a558a7e09d285278b2590b34c14f930d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
38249e3a09182ec2300846e5365d1f69

SHA1
04b5d60e02c244407755be35745f8d264ceedafc

SHA256
f431f84a4002ae47336c2f143b49960eef0843c4b44e1d2fa80ebeab270202ab

SHA512
7f0c6347006c1c73b86653952574d79b679b4e4219466ceb652ba2fca61c9092c666c3887bbff2a5a86a98d9477524a3623edc9a99f066b436fcc0462e600901

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
fffe59848070f711f3a6c57ffcfb806a

SHA1
d03673a898f5fd2bbb2983ff5dd8570d6129b38b

SHA256
4a3fabd397b887752b2f266003fd2bcbce15f3f4d1742132c0780ea7b8ed7ece

SHA512
095d757e5684c24905567b2a6199d8fee0d3f951d3aefdc5ca63c367587d2be1dc9b38639c436b2bcda5f13b6c33997b8875108a4de277a348cdb3248264e0c8

Download Submit