a8abfb23c00d2dd6474302ad87e9d2770be43970c68747f23a533dddc9424d7e

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
14/07/2024, 05:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

447b0c6f7bdf66a763f9df1af2b5c016_JaffaCakes118.html
Size

15KB
MD5

447b0c6f7bdf66a763f9df1af2b5c016
SHA1

845e0a360942c4ce6854269156f4b8e1c6f27981
SHA256

a8abfb23c00d2dd6474302ad87e9d2770be43970c68747f23a533dddc9424d7e
SHA512

2eabc5b97791c0c3e08bd3cede62989bbcfcc1040ce02bcf50250b19b712ce4b42de938947fc26653185eb546ccc5f875e0d1a594a35665ef363567388acf3f9
SSDEEP

384:/69cvw6MeHna5vpMuxeAwIvWTHQbNgJEJ2:/kcvS8aHcICQm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4440	msedge.exe
4440	msedge.exe
2396	msedge.exe
2396	msedge.exe
4956	identity_helper.exe
4956	identity_helper.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2396 wrote to memory of 4792	2396	msedge.exe	85
PID 2396 wrote to memory of 4792	2396	msedge.exe	85
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 5044	2396	msedge.exe	86
PID 2396 wrote to memory of 4440	2396	msedge.exe	87
PID 2396 wrote to memory of 4440	2396	msedge.exe	87
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88
PID 2396 wrote to memory of 1276	2396	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\447b0c6f7bdf66a763f9df1af2b5c016_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xdc,0x108,0x7fff317746f8,0x7fff31774708,0x7fff31774718
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:8
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3784 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4888 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4888 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5992 /prefetch:1
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,1213048433317529773,3137669934660906493,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4796 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3548

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1548

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2540

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\923ae3bb-4b19-4cea-989b-9ad6c904841b.tmp

Filesize
11KB

MD5
40d477f141d37d60e3f25b12ad600d52

SHA1
751e44cd4fb1267c1273de8eef2ead18f0c8076e

SHA256
cfaaaafcee71f7ab24ca8221f85324edd720d4482e82835982677e611302343f

SHA512
b2b354e0c24809650b61e16c40d2c3d5223b5b685f04f10d658d56786ba4b055c56618255e84d284e6e83bdffb6003757b990f041a18eda901a6415b14580bad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1f9d180c0bcf71b48e7bc8302f85c28f

SHA1
ade94a8e51c446383dc0a45edf5aad5fa20edf3c

SHA256
a17d56c41d524453a78e3f06e0d0b0081e79d090a4b75d0b693ddbc39f6f7fdc

SHA512
282863df0e51288049587886ed37ad1cf5b6bfeed86454ea3b9f2bb7f0a1c591f3540c62712ebfcd6f1095e1977446dd5b13b904bb52b6d5c910a1efc208c785

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
60ead4145eb78b972baf6c6270ae6d72

SHA1
e71f4507bea5b518d9ee9fb2d523c5a11adea842

SHA256
b9e99e7387a915275e8fe4ac0b0c0cd330b4632814d5c9c446beb2755f1309a7

SHA512
8cdbafd2783048f5f54f22e13f6ef890936d5b986b0bb3fa86d2420a5bfecf7bedc56f46e6d5f126eae79f492315843c134c441084b912296e269f384a73ccde

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
a6022d5c95d4838c18a7e74fc6cd1298

SHA1
e5705e21935b5542fdab3827d510059da21cab42

SHA256
fa66fd90d59d75eca1582c2a686b1d541fa53af1c8fc7dca4aac0256f33e5193

SHA512
13dca8cdb6cc1ec268e6c09dece7f6b8f512b3018efd36e9a684df261179b1be18cb49800eebf7a3480b1639f457dbd3523b8b4cb19b57998d914ec0db6daa56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
580124b2869f64c114d31d82be7f65e1

SHA1
27d12f308e0f39fe9adbe9491fda43f0233acb9c

SHA256
b357f09c4e0434defa6834b7d117fab3c40f14664fdcf960ba0be3bab06fc98c

SHA512
4196e3dd4f66d2154d4c8b94e36d802e1e7aeea008bc92fca3ad022ca78c4cd9cd5f269f1faa189e1978f0f7412a474fc73a8ed48bccf727241be3df9c7724ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
da589d5d0e44aee6183a74ad0c6a7c2f

SHA1
d9d9e991c42915a4faafc46dcb8160901a3debc7

SHA256
a0774cc9cbd6db251ef8655b6d1ed5f0c0f54b4c140c0445c9cb0a4f74ca0eef

SHA512
344a9080bb61a358979704eeff3c14626d4064c98ad415b19da613df5da65063a917a8977944da21805878f423b1b506ea62fabf29c3a7b8fe2f88fb25b855f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
eec29af9a17e846ba5891abcb4b87e77

SHA1
4580ab34b4f367d1c9e8e9dba3453407bd47c4f4

SHA256
215e66985a68ed8615ba0bb1d93141786a1c80adf0a07f087950ad400363eda4

SHA512
8f9de006c23f29daeeb6afb273606d80e288699d697caa430e5e7db8524ad3d8eecededdfa23e0fcde016e91f964d046188919411b5aa68c169f8afd8e06ca53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit