65e7e454c6db56eb7ea99895d3303d01f46e017ebb96d65b5a6036223a142fcb

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 15:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8e9b73a0bccfbfb3834ba965ac53d551_JaffaCakes118.html
Size

175KB
MD5

8e9b73a0bccfbfb3834ba965ac53d551
SHA1

63d38d841c807327dec5b412d0b6feb8783b415a
SHA256

65e7e454c6db56eb7ea99895d3303d01f46e017ebb96d65b5a6036223a142fcb
SHA512

4f97e2199db8520f2ce6ef5dab932b23e554f1929cfbcb7963c1329435da9124160da485b488905c781653402c8c890988b1b90e92126f9c5ce0a3fbff5506e2
SSDEEP

1536:SqtO8gd8Wu8pI8Cd8hd8dQgbH//WoS3wGNkFzYfBCJiZC+aeTH+WK/Lf1/hpnVSV:SaCT3w/FKBCJi9B

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2760	msedge.exe
2760	msedge.exe
1920	msedge.exe
1920	msedge.exe
1280	identity_helper.exe
1280	identity_helper.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1920 wrote to memory of 2948	1920	msedge.exe	81
PID 1920 wrote to memory of 2948	1920	msedge.exe	81
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2456	1920	msedge.exe	82
PID 1920 wrote to memory of 2760	1920	msedge.exe	83
PID 1920 wrote to memory of 2760	1920	msedge.exe	83
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84
PID 1920 wrote to memory of 3612	1920	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8e9b73a0bccfbfb3834ba965ac53d551_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffec5a346f8,0x7ffec5a34708,0x7ffec5a34718
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:2
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3176 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2736 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3464 /prefetch:8
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3464 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4124 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3800 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,6947561625825510441,1314347306444849053,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1916 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3124

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1904

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1604

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2404

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1ac52e2503cc26baee4322f02f5b8d9c

SHA1
38e0cee911f5f2a24888a64780ffdf6fa72207c8

SHA256
f65058c6f1a745b37a64d4c97a8e8ee940210273130cec97a67f568088b5d4d4

SHA512
7670d606bc5197ecb7db3ddaecd6f74a80e6decae92b94e0e8145a7f463fa099058e89f9dfa1c45b9197c36e5e21994698186a2ec970bbdb0937fe28ca46a834

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b2a1398f937474c51a48b347387ee36a

SHA1
922a8567f09e68a04233e84e5919043034635949

SHA256
2dc0bf08246ddd5a32288c895d676017578d792349ca437b1b36e7b2f0ade6d6

SHA512
4a660c0549f7a850e07d8d36dab33121af02a7bd7e9b2f0137930b4c8cd89b6c5630e408f882684e6935dcb0d5cb5e01a854950eeda252a4881458cafcc7ef7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
da45a857377a73a00993ef39d773a8de

SHA1
152f934a893040341602f289b8bdc9cf9c89e960

SHA256
9e8814d76d5622896f29abcfa43722e4057ab42a5d9bfbf1498f16cb335f300b

SHA512
8c68411bab93d0a31ff6e124ec93910946901a87665bad8c33677227b7c30476af9e607c0714444a01e2d0f19f7a1db1ae336d82eec05a7c146cc71f22c95a42

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
7f808be41628f27ee2e4b0155fa22033

SHA1
1a86bb64defcfb92f7ed426b51d8ea54f6a935f6

SHA256
7bf3ffe00d114672dc866ac3f5876ad345314ee6317a42017c7be8496386ef37

SHA512
1e952e3601463f49b1385a8da8485cb9c9f02e72956f792a16f0a47f374cdae813c23a35967b6078aad05a1e154714111dcbad0328f5988d56537f37f643d407

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
949defddf991b336a249aa3c900a5c3a

SHA1
ff68d9a92bb1fdb77caa283c4ffe5150b2a17155

SHA256
ded976b593942167d8e8847eb78fbe168ead3d4fa8ba38817642bb89b2a9b8ed

SHA512
97842df67a3607e87ce567e4a41f0a2660d02e8d647c7436524ed765358d7877c0bbe56f3b4948a32e8b93b71fd2bb6b47cc0efa59d8247e92922dff2c197b0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
c02b9ef4de4b9c4b58203d4a041eda15

SHA1
a7916c07219bcdea9944d2fa389ff79681557384

SHA256
dd0214bce92fa5a90b977e0c0ed07a71cdb7e0fe0cdc6685d0424630133f2cc5

SHA512
efbfb4c17e48ed26330de915efcf25c66ecfa23458b9d04e4080dc4393a8cc5cd1df1886806d41b84d423bd9145e4e4a7ace8a8c1d7cf98dde13714f326ad3cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1cd4a47789d22b7e50736ddb83194d59

SHA1
69800f3f89f04aa3427d8949d7c4f0a457d8afd3

SHA256
47d21971e7f5292d8a0a7d4e8c8bdbe5753783b72fd14f9f48fe1036011dc2a2

SHA512
dc6316ab1248b650c08b3eab456df7af0d637b7e5279b7c5e3099400233d596390395f4d20b8958736df3f7369349a6443e33a2839d04472e317e22cf0f7f229

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eb7efa98-9a04-435e-b8e3-2f8e7a9e6d65.tmp

Filesize
10KB

MD5
14620156358e84d5a0b7fdfb865a3a12

SHA1
0e27d70266802ba235b31b80b93a9550cc359869

SHA256
efa5c4442291df651ece7dc1ab6d279623d8a4205db367e360daccd55c2a16ea

SHA512
8da0c2fbce595c33e0bac3ed72c4ab9c18b9c7b70f0875a64de06d370db66fea6d0c6e330420124cb63b2e16f7672f60839a26aab88e6e176017d10029b8b93a

Download Submit