487cd6267cc5c00cb8a59aa4bf2a70ea16dd7531166bd2034d786648c3691aea

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
25/07/2024, 10:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6f31e45b02d4d94490a7768b9fef0005_JaffaCakes118.html
Size

42KB
MD5

6f31e45b02d4d94490a7768b9fef0005
SHA1

87c2dd4cca848e96974ba0d9f83355dcdd9b09bf
SHA256

487cd6267cc5c00cb8a59aa4bf2a70ea16dd7531166bd2034d786648c3691aea
SHA512

fafb644d40376c02888e909ed8295e6dd353dc24cbe9d9e05d25133ca4289725505416d7152ff1b7dc5e70fc2776f54246568e153077bf660355959f92b3b29c
SSDEEP

768:Zcd9QZBC7mOdMMvpC5I9nC4FTUVEAIjZQROG3vXnlADpLIv5M4X3LWouKuGryY5Q:gQZBCCOd70IxCeTUVEAIjZQROG3vXlAh

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2340	msedge.exe
2340	msedge.exe
3404	msedge.exe
3404	msedge.exe
1692	identity_helper.exe
1692	identity_helper.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3404 wrote to memory of 3736	3404	msedge.exe	84
PID 3404 wrote to memory of 3736	3404	msedge.exe	84
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2132	3404	msedge.exe	85
PID 3404 wrote to memory of 2340	3404	msedge.exe	86
PID 3404 wrote to memory of 2340	3404	msedge.exe	86
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87
PID 3404 wrote to memory of 4832	3404	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6f31e45b02d4d94490a7768b9fef0005_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffadc646f8,0x7fffadc64708,0x7fffadc64718
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2676 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,5233608743953279870,10861816343483714467,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5488

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3012

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1352

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9a00be27-7719-4cc6-ae96-96297ff6e95f.tmp

Filesize
10KB

MD5
c089fadb0aa9d2e7fed1c1ecb2492014

SHA1
15ccb93bbc0f53b3e0c05d97b2d35dad399f92de

SHA256
1ec8c01c83ce4de01e31e603ae9480d6c3b960c677ed88c53657d47accdc455c

SHA512
14fbd56223760c9b34c3d2f2e9d5ae278a75827d1860233ad8e61e064877a692d32b077a5ad97cf9318eea9a14b7cfcf126bd8625dc418050dd9337bad5b8dbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
04b60a51907d399f3685e03094b603cb

SHA1
228d18888782f4e66ca207c1a073560e0a4cc6e7

SHA256
87a9d9f1bd99313295b2ce703580b9d37c3a68b9b33026fdda4c2530f562e6a3

SHA512
2a8e3da94eaf0a6c4a2f29da6fec2796ba6a13cad6425bb650349a60eb3204643fc2fd1ab425f0251610cb9cce65e7dba459388b4e00c12ba3434a1798855c91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9622e603d436ca747f3a4407a6ca952e

SHA1
297d9aed5337a8a7290ea436b61458c372b1d497

SHA256
ace0e47e358fba0831b508cd23949a503ae0e6a5c857859e720d1b6479ff2261

SHA512
f774c5c44f0fcdfb45847626f6808076dccabfbcb8a37d00329ec792e2901dc59636ef15c95d84d0080272571542d43b473ce11c2209ac251bee13bd611b200a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
210KB

MD5
5ac828ee8e3812a5b225161caf6c61da

SHA1
86e65f22356c55c21147ce97903f5dbdf363649f

SHA256
b70465f707e42b41529b4e6d592f136d9eb307c39d040d147ad3c42842b723e7

SHA512
87472912277ae0201c2a41edc228720809b8a94599c54b06a9c509ff3b4a616fcdd10484b679fa0d436e472a8fc062f4b9cf7f4fa274dde6d10f77d378c06aa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
c34755ddedd9df8fae1a51958ed8accc

SHA1
af385259c9b6cd7aef582dc3066fb5a819698c79

SHA256
48cfc17ea979713e96c4e724c2cac17eab0bf874fd0eefbb5815fc6c582d2505

SHA512
3a292f7d2322aac28292048a8b96f6056ae608ec561404955992a914db1ea6c12e4ff6b8533ce7bee30df72570d0dd4b18d6b217b558f6a08e4babf449ba60d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
dc89ec79823f2cc2cd5c17bf8f3740c4

SHA1
ab22a0402e6b76b71f718ca512c1e8fd951d1097

SHA256
4bafba0a1cd4fc1bda89343720381edd75725e4fe3000844f438cfb08472d512

SHA512
9150207ba3e9dd3ececbd9f778110f4f1be36e928ab5c811d1bf038b875556140cb8d5b24c0e0f105ce47215572bc056b31536ce0267dd511bd373551117e55a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
a6926b0693444bfa28043d429d780cd3

SHA1
aec41e3555e2b936a5db6acb6d5780a500c1c309

SHA256
42d7e608d689b1ee5fdc4cb55d391d778fbbf824da7da90a0c609bc430b75cbb

SHA512
d1e46dea3155c86f2c46ec319fb55f1c5d3379c33196c60b9f6dc8a5cb7ad42f17a4d8eccf6bdbb7b4b211f4173c91e1dc547b94cf960dc9f827ebf4b47e6a36

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
30aa16e1ef04e5cdd54896e20c190137

SHA1
65b65c58f369ffe1c03314fd925a1595812fb126

SHA256
731ff36203ab3a91c235c51a0b4fee91e29bb218997d93de48017c7194bae047

SHA512
da9b0288d87115b897b484fecb72646c0e55da7f2bfecba7cf91f86f9a11557a9418f753b711c3550b8f23a88534a2a7d696ab7d4b17a95315946f27e7d59a06

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit