40bd0dba7f81d8e6080c35c9dfa91b9daae8d8ec68b3c976c794aba94eb1abad

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
07-01-2025 12:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_62cfa67482961398e084d391dadac5d7.html
Size

80KB
MD5

62cfa67482961398e084d391dadac5d7
SHA1

a13abb6b5ab774b0256ae7687f76bf849c3aee7c
SHA256

40bd0dba7f81d8e6080c35c9dfa91b9daae8d8ec68b3c976c794aba94eb1abad
SHA512

cbe185038b3bfe457029d69d802d85d1698969ec4dd01e86b283528f9dafd1df292f855d90e12b365bf561661c159964332339cc1c2069037a95d91b1d6da046
SSDEEP

1536:hM6Ob+xg1a798S7EJJ7e2lfxsYndcqCm1urlR8ldq5:a6OSxIa79pE7e2lfhnuqpurlt

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4428	msedge.exe
4428	msedge.exe
1828	identity_helper.exe
1828	identity_helper.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4864 wrote to memory of 3724	4864	msedge.exe	85
PID 4864 wrote to memory of 3724	4864	msedge.exe	85
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 3496	4864	msedge.exe	86
PID 4864 wrote to memory of 4428	4864	msedge.exe	87
PID 4864 wrote to memory of 4428	4864	msedge.exe	87
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88
PID 4864 wrote to memory of 2160	4864	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_62cfa67482961398e084d391dadac5d7.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaa9a046f8,0x7ffaa9a04708,0x7ffaa9a04718
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,1919232640285167793,13008934053257554124,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=212 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4520

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4844

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2936

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8749e21d9d0a17dac32d5aa2027f7a75

SHA1
a5d555f8b035c7938a4a864e89218c0402ab7cde

SHA256
915193bd331ee9ea7c750398a37fbb552b8c5a1d90edec6293688296bda6f304

SHA512
c645a41180ed01e854f197868283f9b40620dbbc813a1c122f6870db574ebc1c4917da4d320bdfd1cc67f23303a2c6d74e4f36dd9d3ffcfa92d3dfca3b7ca31a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
34d2c4f40f47672ecdf6f66fea242f4a

SHA1
4bcad62542aeb44cae38a907d8b5a8604115ada2

SHA256
b214e3affb02a2ea4469a8bbdfa8a179e7cc57cababd83b4bafae9cdbe23fa33

SHA512
50fba54ec95d694211a005d0e3e6cf5b5677efa16989cbf854207a1a67e3a139f32b757c6f2ce824a48f621440b93fde60ad1dc790fcec4b76edddd0d92a75d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
6e819b75656eacee700cc83993f5d9fd

SHA1
4657a1d5ef2fd9afe71ec2c49ba3711229887238

SHA256
a98358a7d0593fa956de2a8c18ba60ca70dc59faac8448007812d30c00dba832

SHA512
da0b9ee93cf7d385bc29f1c01eb9615619048722feb7a25197e76b62a8ca43beb1f320cb7f15f74b863eb11e3649952b76d3b028020097062082d1a019ce9ac2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
679f04d14537f9b2d00e564e1f278878

SHA1
fc5221d57eca059bdca522d43040912a601837bb

SHA256
cadf520412f90fc200ec425b8396e1fc8ca0e33461893ac0403838bc29d9a604

SHA512
a67827d8c350ba93e43206f10f48a958c9c61eb79215ec169f17db6a4580d9e4e03e96f787ce604df1d2d34e0ca0808a4560407f186973b471742602c7358a7b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
d368b33100003969709e825e63d1b914

SHA1
4a92d633c47fb2c293d7f09a87bc0b223c6f3d45

SHA256
45634f4da0caac150c0c179c1a09e7dfcad9e8ee40d859354d880de30ade6f93

SHA512
d442dc055625621a7ccaafb98001b43c28fe69e73311ef16615c36e81ac355b50e2bdd986d4ece68f755c666379fe1095b37cb6dac37b07f8362b5e052f8d572

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
e7de904cb56a9c2a7d9bd888a131b509

SHA1
000f2d0eeefaa03abf9f4442f5499a4a98a6c175

SHA256
0094d40198d81d404c6da9085f7b3cb1de8c050b0f3fc426baa647b7cacec5e3

SHA512
36cbcae76c0c510a390bb716358c9b5cf4f54bce39fe1f477c09356a9272bd256bcf1701c93fc14fb6e18e98fa4db30fa545fdb142ec3b7d6354511afe052788

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f4455a3efe216ff487b329c452268374

SHA1
33fd0beb1448b2c88c39e44f76d30f372aede8cc

SHA256
278b0c78271939d1ac052303ccb542ca81a5d7abceed3e92a9a1498c954fc6dd

SHA512
80e2e03ea2e7e662f8b578a0bdec2dfd66b14cf5b6541d09dd63a5d68f93bdda9c4538b77d293509c88ca8b1880020d704030dd4e873dc44426a7632bb5a8122

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
ef99a7ecc06b0851954372b82009f131

SHA1
0d517132615008141f56e147060ffe4838401453

SHA256
15e1e3db4b1e223f5836409b66ff1f6b854c34174c89e00693b902a1748ece5f

SHA512
9c993882e6835a95ac6e96faab5e0a832b8f8b215640fbd080e22ebc6fbe55b0698b62d1cccb5a9e7aa9fdd8c26a966a1d395f919fce2ef681c2f1c29fb8e067

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
cf63efca52655c59c40ce7761d3b75e4

SHA1
d00ab7fadff69af853c1633d97919544adcfc0a6

SHA256
4e4a87e24c52edeb190628098a946eec3352b475695b1977035b07171d3f83ec

SHA512
e73b7ed0e1ac16f1fc83e73469a0b88e95435a3ff4a71ad78f2bcea0d7e362281e47737b6c83152641c2b900c0e7efef6586bf2035c2f9e55b07ed6241238c61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
091c8b61d98426fc39fa4e7b53bf5cd8

SHA1
c31e2d907ea77fa45208642499fc503118187805

SHA256
7d53170b45c72ab3f92276505229c4367ab1d30f1d05244d8aac11ff244afd31

SHA512
305d16e06bdb094483a752deb0c2c35eb48f62a5211d5ee05e8e3983e4df7b45afab3cbd63b41f51082cc3ceefdb1c69557777583a32bdce10014e8e118bca17

Download Submit