ba1ce5ae5c9e697ac5ab58b640f6d2cb27a62d2fcb7dbb93575d6384fa523039

Analysis

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 08:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
911afc8af1168e4f0a02d07c3e7983e0_JaffaCakes118.html
Size 15KB
Sample240603-j9752aac59
SHA256 ba1ce5ae5c9e697ac5ab58b640f6d2cb27a62d2fcb7dbb93575d6384fa523039
MD5 911afc8af1168e4f0a02d07c3e7983e0
SHA1 070f27262aa4b10613782e15d0d5c28298653d96
SHA512 e467b05311046bbabcef30f324b3ff5dd4bb22f2f849d3acd2ab6a04be6e9accb0e3e4e60efb053fcedc7a927d7a2325089b009e5ddbb24ade6aa154edc0dea8
SSDEEP 384:tRkR8dhCpqZBiZNwHwHO8YjW/5+V0APZjNcVw:tRkAcMZ8ZNOtzR
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2664	msedge.exe
2664	msedge.exe
944	msedge.exe
944	msedge.exe
4176	identity_helper.exe
4176	identity_helper.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 944 wrote to memory of 4904	944	msedge.exe	83
PID 944 wrote to memory of 4904	944	msedge.exe	83
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 4132	944	msedge.exe	84
PID 944 wrote to memory of 2664	944	msedge.exe	85
PID 944 wrote to memory of 2664	944	msedge.exe	85
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86
PID 944 wrote to memory of 2692	944	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\911afc8af1168e4f0a02d07c3e7983e0_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdfb5346f8,0x7ffdfb534708,0x7ffdfb534718
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2920 /prefetch:8
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5252 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5188 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,7182442609224727886,6244845808608890656,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4940 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2288

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5004

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1628

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7797f766-6f6b-499c-86a3-938535709734.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7797f766-6f6b-499c-86a3-938535709734.tmp
Size 11KB
SHA256 3eeef5bce69102b53da58e6b5543f0236149dc3520b3c79223aaeabba752b130
MD5 231e0c15372fd746634f5a9dde23f161
SHA1 619fb79f57409481f88f68e36674fba7bcd02d14
SHA512 43b12ad3217dd88006f59ddae1d04504876aacdb2e2ba92b42252306328bbf674a22016fe6308eb47103dcfc8a1680640e1dd1be75dc0e99f55b47d69852e93b
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupyvle2RUfb/myw3z2OMDCRr:A9iIxuERzA83h09RZxY8BmVwaOMWRHqg
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64
MD5 f61fa5143fe872d1d8f1e9f8dc6544f9
SHA1 df44bab94d7388fb38c63085ec4db80cfc5eb009
SHA512 971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262
MD5 87f7abeb82600e1e640b843ad50fe0a1
SHA1 045bbada3f23fc59941bf7d0210fb160cb78ae87
SHA512 ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 555B
SHA256 fad09cb6b7607997c44944a0e0cfbfaa7d8e83e39db4dfddded778602b641981
MD5 ae5f8b4cc299f14a9b174f192ad33f85
SHA1 4710902168d29ffdfcd659fb04573c2b3e9d251c
SHA512 5b5f5b727b2584fd6e24e72973089fa333444a54e045caac1aa84076d9b42b8c94ba635092a3a8b8b0afff0422071149b7c8dd8f068cae8839cb6b437cb5b3ba
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 85124bd306816a26b078e527cdf6ebfbc7b619f6b084fed81b958c3a8c71b5f6
MD5 819759209c816c8cd05f11b6be847f99
SHA1 4674a3eae7b80dbe0ea73324b33edced5eda562a
SHA512 915ec9b75fdf5daf93d6de274e6d0729e6bc0ced2f77da6c18a455697df72293d8d693b14163bd107eb089167a939a46cc9d640a11c2ded32c57c10c72a7311b
SSDEEP 96:nLkRL19v0wpvWMoiVmdeH/zBSUWQyV+VDCziEwb:nLkd38GWMX4ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 a2111a02acfc4cfe51c6f64f9cee93a8560c46f76812ba6c0841976b084d19a6
MD5 49edf6bb0e815a1f7c9ed18ba31a85bc
SHA1 f41d4eab438675b4db8cd23cda3dbbb21e3fcf7c
SHA512 8800cfa8b3e735cd1d5750f6800028a88c77843d27725fab223c80a8ec36f00f5206bd368d8c7478d74ccec399f54f3eb6c203f6076f36b25c754fa7fc3d0d09
SSDEEP 96:nLk8L19v0wpvWMoiVmde9lu8IlhxlErl2/zBSUWQyV+VDCAiEwb:nLk238GWMvOlER24rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 6d89788e37100baf790a225b9f2f728e5bedc327d1d3aae558d86f268306825a
MD5 3c810c3ad9ac58c731dc87290f8bf7c5
SHA1 a341262cd4c49e41c3318188f40313d2c85ff8f2
SHA512 c5ae66399a39244e783a15892506209cae1a08ac01f341a5291a1e9532fcdd9310f0d3f5efd7f6ab7001646188dfd4fc05e4c12ac966e26784a5e736620e3288
SSDEEP 96:nLk8L1930wpvWMoiVmde9lu8IlhxlErl2/zBSUWQyV+VD7AiEwb:nLk23kGWMvOlER24rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 705B
SHA256 5bfa779142ffc6027cda3f383d85fc4663cdacb261af10ec11e105e88db1fe1b
MD5 7b75a5a4ac407793cdd767a8ea2bd9d5
SHA1 23552d7e8a13534a8099ac02c98f5eb8437476ba
SHA512 5149c76b55407410b26a1f27e0d31d561452a4091ee21924e45e64090fb708ee941b2261442cf1dddad120156c908c2ae94c225230e43d57f720bb07a5d8c0c9
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57cff2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57cff2.TMP
Size 705B
SHA256 9d141f517df45d2b4ffff991a791ff7dcf6c5754cc38739053b245d49e9c2978
MD5 ffefda4222a25e2d159af158f32a7846
SHA1 b185dc7d3eba6af4e2c79157aac2e81cb1112b29
SHA512 561c6cf895df31231631f5e7d5949170fead694b1393e2904af111c02064ac1dc79fcadf50e85c83061e203e65e3c657ed798ff50aeee4758967c26360ea7723
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download