edb2866796e5ab8d0ba065f1fcd6d0b142543bb40a4b47fddf8f7b3174a7b344

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22/05/2024, 19:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

685ac6003ef7256ea2eb0c5492f75b98_JaffaCakes118.html
Size

58KB
MD5

685ac6003ef7256ea2eb0c5492f75b98
SHA1

a247390309797cd01ea7edfad51ff7da76790b08
SHA256

edb2866796e5ab8d0ba065f1fcd6d0b142543bb40a4b47fddf8f7b3174a7b344
SHA512

2426a8badcbaa2b9208a818aa90b626ea020ea3874f5389655ed42dceaf69689de26c9263d1470ebcd7e8f37d18f33b1c13598d761fe8c226fb25d31e6cdccbd
SSDEEP

1536:w7UHv7o6YslFpSb4oSBkzt8k9NkuDvAnC4aE+6Ftku:xHTr5NSb4oSOzt8aNkuDaC4aE+6Fth

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
3456	msedge.exe
3456	msedge.exe
4128	identity_helper.exe
4128	identity_helper.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3456 wrote to memory of 3576	3456	msedge.exe	83
PID 3456 wrote to memory of 3576	3456	msedge.exe	83
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4956	3456	msedge.exe	84
PID 3456 wrote to memory of 4736	3456	msedge.exe	85
PID 3456 wrote to memory of 4736	3456	msedge.exe	85
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86
PID 3456 wrote to memory of 1168	3456	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\685ac6003ef7256ea2eb0c5492f75b98_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa84ef46f8,0x7ffa84ef4708,0x7ffa84ef4718
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2908 /prefetch:8
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4924 /prefetch:1
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2212 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1256 /prefetch:1
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,1513070566543759266,12516542957910528569,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3116 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2676

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2252

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1184

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\05b6ca26-67bb-4b5f-bb6c-3eb19c2f0bbf.tmp

Filesize
11KB

MD5
ab2b999cbdbdc76e9d7ecd52c1f1c99f

SHA1
acbf578d0b0d144cc8f0ba66922efc93905ccf3a

SHA256
e227f377437fa2424c152a080c5e3cc94c96530f4f793d0d5dcaf794bc9d32fe

SHA512
9b51f1a4abc656049ec2c1d4174225911cb8c7a8b6067fc671f72cec47fb188443142cdd32b324e3845c79aaf0f50ebb3d3f5e2b83baa1a5f52fb34ca576e3c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
cd2513c744c60a372d1d46377b033e84

SHA1
9af57c1a14e9f980c7a4739b806fd8aa376e09a1

SHA256
bcac69e0ee6e9a3eb74b3c2fd3b06f4ef8f9d9b305f84fc0a34216cf73f29d0d

SHA512
50a4a72ba3225f52a04950b9defb11c0ada894520e4def0abce4b9e7dac5bb60d8b11a2415a4f2a8101a3dd8557e6457bbd98b897848a1c0f4fa66b480eaab30

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c3130ef2bf3573598d7e65b936f630f7

SHA1
3f46b51d7e80952783929115c94b79b50be49906

SHA256
312cc8e027fab68f113141b51b03c1c24370b0594e780685d2ab17df33ecdbc4

SHA512
68a85dc5ebe7e1848b2db8b45a3a674d7bec2774f795f4a85782a3afe7befba4eb11f248b042593eaea39d3a690c56a2996f2d7df0ef01e7a0e29d2acbbae32f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
575a1d924e699bf1d1913c1d3d6ceb22

SHA1
7f22a88d23380c0dff2326aecc166920160baa18

SHA256
fae31c633aa7e1f78e680c746c955b0c8772df19ddc7ac2c0592f28dd0e79f8a

SHA512
f5a11bab1987fdcebe174822ea52d64e11b0eb2aafce21a1a21e32412ac2f7189c7116996bbdddf714ef5058bcda9ddfc216f78ec9a032081d1883b90b460653

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fb1b267b7ea02f58ce8da4d6ab689de9

SHA1
6ef28d30b44a687295754f3d21cd425bcbb15b58

SHA256
35bcf35a78452efd2896ace29c2303cb5300a98663398455f2fa2996def2f4fc

SHA512
27a1501ffda80a260ce4e7159daeff3208121cc29cc33028c1843c2880b2857b62384b7920562ac9b3fd0b6fab01e4bff84b64e78aa681530cf4cd36b0f4c905

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
bf35fb0acc3022d1d61f970812118383

SHA1
4692940a7cc3a2e05ca94049d8dbf0bb83dc3142

SHA256
ab467bb64aa9d4f134cb6c076d8f6dcff2b689664095aaa37e1af74c251b9256

SHA512
75959ca927e3f8fff493c054b8b20b3c9df11d6c8b9ad2ccd0843fa5305b0429416ddab06ca6ecdc68c788ba996c4e0648ee08ef487e80f092003762d38e53ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit