3714ab548e486424b3953531b2c330626275264be35b02e4f0bd38d48bc5e278

Analysis

max time kernel
150s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 09:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

a02ab124d0684a0763366d1d838d8073_JaffaCakes118.html
Size

38KB
MD5

a02ab124d0684a0763366d1d838d8073
SHA1

fbdf960c4e68c44022a8e3b0991ab375f3fb891f
SHA256

3714ab548e486424b3953531b2c330626275264be35b02e4f0bd38d48bc5e278
SHA512

bdd96a094bad86570107d369b08d262f88f3c8233cf22afb2bc59f749d6dd0a74cfbc37190672faf598cb9751be4ef8e1f8543084372dc180b89afa8fa782ddb
SSDEEP

384:J4WiQ30uNIBHEHAkclurfE5DrXd0wc+NxJIGYnE5YwUYA6JVG365kYTv6jiB5FBW:IkcluTE5FDtjZAgG65kYTQiPFR3t7zA

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2216	msedge.exe
2216	msedge.exe
536	msedge.exe
536	msedge.exe
5104	identity_helper.exe
5104	identity_helper.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2216 wrote to memory of 3828	2216	msedge.exe	79
PID 2216 wrote to memory of 3828	2216	msedge.exe	79
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 1716	2216	msedge.exe	80
PID 2216 wrote to memory of 536	2216	msedge.exe	81
PID 2216 wrote to memory of 536	2216	msedge.exe	81
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82
PID 2216 wrote to memory of 324	2216	msedge.exe	82

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a02ab124d0684a0763366d1d838d8073_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xe0,0xe4,0xd8,0xdc,0x108,0x7ff80afd46f8,0x7ff80afd4708,0x7ff80afd4718
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2536 /prefetch:8
  2⤵
  PID:324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3112 /prefetch:1
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3120 /prefetch:1
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,4345923888050187625,3146226039651432502,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1928 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1468

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3264

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4028

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\00bbe64b-5960-4df2-b442-e05ac064bdb4.tmp

Filesize
11KB

MD5
4a52808a1645aacdbef0b7d29238caf4

SHA1
1d8317a535a6904dda61eea8d2ed960b6fc0bfed

SHA256
7560a8432cbeca84081cd496662912ebdeda6f67c2b7636170fb61b13e042c86

SHA512
d69b54f05366482b3daa4f603ac66b0a689e689fedf04ef5da3da4428bf244909b9beed562fc9c3921814a521613791335d9209cf4457a6e116b1d21b3609f61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
81e892ca5c5683efdf9135fe0f2adb15

SHA1
39159b30226d98a465ece1da28dc87088b20ecad

SHA256
830f394548cff6eed3608476190a7ee7d65fe651adc638c5b27ce58639a91e17

SHA512
c943f4cfe8615ac159cfac13c10b67e6c0c9093851dd3ac6dda3b82e195d3554e3c37962010a2d0ae5074828d376402624f0dda5499c9997e962e4cfd26444c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56067634f68231081c4bd5bdbfcc202f

SHA1
5582776da6ffc75bb0973840fc3d15598bc09eb1

SHA256
8c08b0cbceb301c8f960aa674c6e7f6dbf40b4a1c2684e6fb0456ec5ff0e56b4

SHA512
c4657393e0b9ec682570d7e251644a858d33e056ccd0f3eebffd0fde25244b3a699b8d9244bcdac00d6f74b49833629b270e099c2b557f729a9066922583f784

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35262fc8-633a-4bb3-952b-b70ddefaa4a4.tmp

Filesize
6KB

MD5
604489a38368f1eee645a05791063bfc

SHA1
f5388eeba1b81aa9a7da707689f3d3f872130efb

SHA256
ef1ab7f966e4737816e042c511a632bcff27dc8ea1a806eb1eb55c107ce7bea8

SHA512
26cec7ee84feb054a1e80a94a3860d3add16652041406a00b77b202316d49a45ea130ee7678391971e0f2bc58cc76cc371c290a5b18672786eb6a530ef9c2862

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
9f57a8c5f3ed06d0cb156e8f94becada

SHA1
a7f2e4a71e05c98e8846648a94bbd4210edc6028

SHA256
95c9cb1d0923e4ae1f46567f9cdc158f8adc7ec7bf26c9553472050a0946e251

SHA512
e76981a34231f7cd206ab9817236fedc17abc4d192089a2bc47406da29d2577a1d73ef57a2e2a0ac0bd74ae32310f5375b3b1da7ad7c9c9327caaa4485eb195e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
f78e381a127dfa5e153aab4b6f1b4a6a

SHA1
5574cfce8fbd6e2064ff05d9eb2850e9138b3a7d

SHA256
692ec44fde3772bc9c4254c513e34c37a38b099a23f2290b7ba1d99807248ba3

SHA512
14fa4e5b185514f4f9442d9be2ec7a47755f0b921f424b0b9453957b3b14a3ab0c1deabe4c1bb8d44fd7980380e8229cf15471e2c22b899e067dc07a2cc4614f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
db1d19d480e5022ac344f59dc699051a

SHA1
259085435e1a1b380e3fb5fc4e644379d283b476

SHA256
2b915be22dd9fc06a56dbc0b62a9dc9a6c4036890b8cb576f4b317d98b12b464

SHA512
7f62f10b7a123ba9c4a0948b67bec46cf1f0498d8d09ffa30e33ff04b9f192edf97cbde4df2976b3fd44f8c07bd1030bd6f93aa69112700f6a27981c9fea2e8b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2f0834640239c1b31816b83e3441ff6d

SHA1
84ef481a2f7beefe64113b45a55d4e90cc8fd2e1

SHA256
96433983ae8ed7b55703cb03fe4c2f8c486564acd295538b127b88debcf1c6b8

SHA512
e6da4de2a170d31d79b7f6c6f61609ab3943d24f6008ad49986a251a084a588d034051f20ec2cf71b0469fe86420394f4c39e54f7758e242cfac92c4d2374198

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit