d00e39ba846abf7f409380325fd9ff3e7895827c39e2430833c836439a84bf65

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
26/07/2024, 03:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

72653bf19b0d26ff75a92ae0466f9881_JaffaCakes118.html
Size

77KB
MD5

72653bf19b0d26ff75a92ae0466f9881
SHA1

8f0ed6298251aa9d39065eb46bcabe1f9f7281e1
SHA256

d00e39ba846abf7f409380325fd9ff3e7895827c39e2430833c836439a84bf65
SHA512

515c06642ef3ed805b2634efb2ffeba0939302fa7ff3895153adcfc8c7c0d31f605ad6ce47d43c5d3eeb02e4a2de81a4253448c2658e7fef60c35d9de33536d5
SSDEEP

768:Zcd9QZBC7mOdMwbpC5I9nC4meHhOcKABPd:gQZBCCOdr0IxCiiABPd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3408	msedge.exe
3408	msedge.exe
3932	msedge.exe
3932	msedge.exe
1548	identity_helper.exe
1548	identity_helper.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3932 wrote to memory of 3796	3932	msedge.exe	84
PID 3932 wrote to memory of 3796	3932	msedge.exe	84
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 4256	3932	msedge.exe	85
PID 3932 wrote to memory of 3408	3932	msedge.exe	86
PID 3932 wrote to memory of 3408	3932	msedge.exe	86
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87
PID 3932 wrote to memory of 2588	3932	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\72653bf19b0d26ff75a92ae0466f9881_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffca0de46f8,0x7ffca0de4708,0x7ffca0de4718
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2128 /prefetch:8
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4896 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,13043803550943152543,3209814329813735221,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5336 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:784

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2248

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1464

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\25f1fac2-1c37-4b79-afc3-71e693494912.tmp

Filesize
11KB

MD5
890c1e235e7434ffcd3803998b721fba

SHA1
3f1c31cfebcffc5f3efcc437155589d3b7b4d7a6

SHA256
14c2861bd886a63d2736e93e98ba8450bd79dc4caef085bb4743415f16a145a2

SHA512
081c87d89777fcb8c3bdd3841fbd9699b96a0723791bd089e3f14841a94d58551e669f2e643318897089900451e23db599e025d9a4dc835e58aaadbd72bfacb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
04b60a51907d399f3685e03094b603cb

SHA1
228d18888782f4e66ca207c1a073560e0a4cc6e7

SHA256
87a9d9f1bd99313295b2ce703580b9d37c3a68b9b33026fdda4c2530f562e6a3

SHA512
2a8e3da94eaf0a6c4a2f29da6fec2796ba6a13cad6425bb650349a60eb3204643fc2fd1ab425f0251610cb9cce65e7dba459388b4e00c12ba3434a1798855c91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9622e603d436ca747f3a4407a6ca952e

SHA1
297d9aed5337a8a7290ea436b61458c372b1d497

SHA256
ace0e47e358fba0831b508cd23949a503ae0e6a5c857859e720d1b6479ff2261

SHA512
f774c5c44f0fcdfb45847626f6808076dccabfbcb8a37d00329ec792e2901dc59636ef15c95d84d0080272571542d43b473ce11c2209ac251bee13bd611b200a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0761f684-1fd7-42bf-8e05-72ecf2ef0532.tmp

Filesize
6KB

MD5
dbc344905b005f4b6edaaf15a999a7e7

SHA1
0e89db3c086dffd8ab3871f5b160b8eb26a09779

SHA256
3be36cbe6e2dfd79e8d438f8e48cd0384b894a4d80ec840ebd28ae1c4a496676

SHA512
9502b66e6ad764539ea9ce89e2123a091f73ab23f9fefce922d3436d51a448fd096d8acb580e2dbfc0aba55ac8bc2b17d36a01de975d01bfa314272257f0aa73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
210KB

MD5
5ac828ee8e3812a5b225161caf6c61da

SHA1
86e65f22356c55c21147ce97903f5dbdf363649f

SHA256
b70465f707e42b41529b4e6d592f136d9eb307c39d040d147ad3c42842b723e7

SHA512
87472912277ae0201c2a41edc228720809b8a94599c54b06a9c509ff3b4a616fcdd10484b679fa0d436e472a8fc062f4b9cf7f4fa274dde6d10f77d378c06aa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
8d6c0529b784e96481bf0e6a976c7782

SHA1
8784bb3744d4f4947144a5c93da92de965e30b16

SHA256
e5d48133d5f1effdf6893b6e26f88c07a058baa997caa83019cc2fd3d7b2dc2a

SHA512
d5cec540d6d51582fc0be0c97f7cb7c498cef5c9f767cf7ca7671c802328da482762500d1418e4fe640fcafc14c472c6d37ed1d87a567be07daa3416b4681e66

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
55ec24fd41d141e73dd0485dfb583d86

SHA1
432aa108f35fe3ea1c9b17c27b1f4e9c0684697e

SHA256
be0732df4da1fa4c96fe92f09828f0eb34a1cefcce68def360cbe4b12b8806dd

SHA512
7b00d2c2d69597397e961a2ee8de16fc93a545e24474537ac6afe3bcfece471130702d60f2cebb6d0aea47a784837a7bf85284dd5a2151d53d2d31a226751cbb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1b999714db9f9a357450dcae9430b362

SHA1
dbfb6721f64bfb3ed71572351e49831f2801cde6

SHA256
4759d7a0246546b9ec30b659bc53302d86a1e8f309bbedceffd2411f723accad

SHA512
7d5b28bf4c856aa1a2997f92b574a61829f896781f45b274c109f51a1b210faaedb076ba7b08ef28d7533e36f5b942b73597e2b235e7ec2d5ae7d39e5e38d4c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit