a3dadd2e0d55eecbb32290b1a9cac9db57287f1d6d68d0389a6f3075d54933d8

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09/10/2024, 10:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2fc608094b4fe3bbd1a42006398fa485_JaffaCakes118.html
Size

19KB
MD5

2fc608094b4fe3bbd1a42006398fa485
SHA1

86f3663fc9e20c7735bdbf2ec4c6ffb89174f560
SHA256

a3dadd2e0d55eecbb32290b1a9cac9db57287f1d6d68d0389a6f3075d54933d8
SHA512

d33bf0b2abdbb68f5fb0c8ad6f2a3410289afd19affdce25ddf24b91b112b8dceac3ec27edab1be790109bfd1bc6d137633882da6a65c035c73691611f5d247d
SSDEEP

384:4+QfPFd9QZBC7mOdM4KtKfpC5IgSnbmFe7Acch6XALAPd:Zcd9QZBC7mOdM4fpC5I9nC4hPd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
2324	msedge.exe
2324	msedge.exe
4604	identity_helper.exe
4604	identity_helper.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2324 wrote to memory of 944	2324	msedge.exe	83
PID 2324 wrote to memory of 944	2324	msedge.exe	83
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 2472	2324	msedge.exe	84
PID 2324 wrote to memory of 4236	2324	msedge.exe	85
PID 2324 wrote to memory of 4236	2324	msedge.exe	85
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86
PID 2324 wrote to memory of 2892	2324	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2fc608094b4fe3bbd1a42006398fa485_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa586746f8,0x7ffa58674708,0x7ffa58674718
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2236 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4908 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4088 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4144 /prefetch:1
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,1916474689388334004,11034784904032160580,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1048 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3488

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4108

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3968

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\514c3990-6d9b-43d0-81cd-0977399ee624.tmp

Filesize
10KB

MD5
5754fe36fcc8a5308115af00760b1f70

SHA1
ae01d3c897b9bc95bef3fdb8251ad3bfa1501a8d

SHA256
1aa85571e1c6234da76d5255884c2b3168d46316ec51128a3e55332ad4bd37e8

SHA512
83eba28f11fe5790a1cfd6a12531e479ff5a378a3d8aaf0d46f63b319be7b4f17693e2be847cfc3b933e9c30adbcccdc8d2beaff16cc9d55244f590a916a1816

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
dc058ebc0f8181946a312f0be99ed79c

SHA1
0c6f376ed8f2d4c275336048c7c9ef9edf18bff0

SHA256
378701e87dcff90aa092702bc299859d6ae8f7e313f773bf594f81df6f40bf6a

SHA512
36e0de64a554762b28045baebf9f71930c59d608f8d05c5faf8906d62eaf83f6d856ef1d1b38110e512fbb1a85d3e2310be11a7f679c6b5b3c62313cc7af52aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a0486d6f8406d852dd805b66ff467692

SHA1
77ba1f63142e86b21c951b808f4bc5d8ed89b571

SHA256
c0745fd195f3a51b27e4d35a626378a62935dccebefb94db404166befd68b2be

SHA512
065a62032eb799fade5fe75f390e7ab3c9442d74cb8b520d846662d144433f39b9186b3ef3db3480cd1d1d655d8f0630855ed5d6e85cf157a40c38a19375ed8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
213KB

MD5
f942900ff0a10f251d338c612c456948

SHA1
4a283d3c8f3dc491e43c430d97c3489ee7a3d320

SHA256
38b76a54655aff71271a9ad376ac17f20187abd581bf5aced69ccde0fe6e2fd6

SHA512
9b393ce73598ed1997d28ceeddb23491a4d986c337984878ebb0ae06019e30ea77448d375d3d6563c774856d6bc98ee3ca0e0ba88ea5769a451a5e814f6ddb41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
84e3937699d4b7b6b5e0b08e43f8cb05

SHA1
e50e221aba2f279dd6864b9f18e304b95d8d907b

SHA256
e5b89ba5375ca13cbc185ed56524eb0a5f891a74fa75ebb42a875ec9608e7243

SHA512
4053610a4a7a1bb96c4b9bb129a5e2de55388be0d2ca3965b36c0c9f9a59e1ad4f151888a5b44d0e30a8a5b6e89f24e55a393ff8b6abed87fd84d608c2406e1e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
374feb1f5c917046596827be248eb14f

SHA1
861223ed1b5905aecffa96b4c2f830ba09345d69

SHA256
a273f9cb38076b25bf02c8ce6e9436e248a30b5fd6975cb8b5cf5345934e5c03

SHA512
fd180fc03a5a25dbf9f18a25cacab6e21977ffbb67ad9a120ab9a054f2e577cb19aaf3ad7b7fedae2be4a0b6faff7f919b111dcd9f0ccc111975f26146da5727

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
60bd2487332d91a705b37700366fd383

SHA1
6db70e9eab26e66654b7e3340e2923ab53613dfb

SHA256
ac783ea7ab8d86510795802f5d934c40a389dd34656f61c55a198a9b1d38f5c4

SHA512
438b56a9cce470ad76693dff0706c345235c5f6c18e1d898ecb41498def1a7859801c54836c4c779524fbe08765610776d06d6539562a8ba840c22ae2985fede

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
51166cd21bae938ca8f8fb4aa0f3cee4

SHA1
bc48ac5ef7dc8cbff45f757e3f6aebfa5f19c7d4

SHA256
9fc3756a4e3bfe159224e8cd5ddeac4cf324b8480c5dc0faee78ce59a416e131

SHA512
c7d166409f59eb4ded8c3f943ac4adbed70bff79afd07900b91164edcac6cb6eeb65367b0296fb20744dc9fc4bf37606c084ac7772d4f045c9635fd502ad7b81

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit