48282b9ab2627ca040a6b965223890d10611ade7b5268f566087a93ce7e15056

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
14/06/2024, 13:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

a9d7bd91f2080838c188b7085d027fac_JaffaCakes118.html
Size

45KB
MD5

a9d7bd91f2080838c188b7085d027fac
SHA1

2355b704464cab8c24622344fad4270bd9819a19
SHA256

48282b9ab2627ca040a6b965223890d10611ade7b5268f566087a93ce7e15056
SHA512

32e034519a8142e0f5749b6a266285920c2428616674a558df11e712ed32cb8355d0f73dc5619e5f6ed063e5fb3d933a619b84070dd32f010e50271d0e21871d
SSDEEP

768:XC3HuuFmn/bBqJvEc9ohLIeoxF8IeeAp2IeU1BmIebSFapef1x7Ie+d5DIeIvvph:XC3HudnjBqJv/ohLfoxF8feAp2fU1Bmk

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2016	msedge.exe
2016	msedge.exe
3168	msedge.exe
3168	msedge.exe
1468	identity_helper.exe
1468	identity_helper.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3168 wrote to memory of 3892	3168	msedge.exe	82
PID 3168 wrote to memory of 3892	3168	msedge.exe	82
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 1364	3168	msedge.exe	83
PID 3168 wrote to memory of 2016	3168	msedge.exe	84
PID 3168 wrote to memory of 2016	3168	msedge.exe	84
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85
PID 3168 wrote to memory of 4648	3168	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a9d7bd91f2080838c188b7085d027fac_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8428346f8,0x7ff842834708,0x7ff842834718
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2804 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4892 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6028 /prefetch:1
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,6214244600961936760,2727976612800820975,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5148 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2820

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:644

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:332

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c5abc082d9d9307e797b7e89a2f755f4

SHA1
54c442690a8727f1d3453b6452198d3ec4ec13df

SHA256
a055d69c6aba59e97e632d118b7960a5fdfbe35cfdfaa0de14f194fc6f874716

SHA512
ad765cddbf89472988de5356db5e0ee254ca3475491c6034fba1897c373702ab7cfa4bd21662ab862eebb48a757c3eb86b1f8ed58629751f71863822a59cd26c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b4a74bc775caf3de7fc9cde3c30ce482

SHA1
c6ed3161390e5493f71182a6cb98d51c9063775d

SHA256
dfad4e020a946f85523604816a0a9781091ee4669c870db2cabab027f8b6f280

SHA512
55578e254444a645f455ea38480c9e02599ebf9522c32aca50ff37aad33976db30e663d35ebe31ff0ecafb4007362261716f756b3a0d67ac3937ca62ff10e25f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
f08f94f6364face3535f8259f503d0da

SHA1
b9ef309df31e1bc0e73026d08947e052e734bdf7

SHA256
6737931cf1fe508de04dd1f4118d8857904e07b01b9f4dc497f67cf182e91b9f

SHA512
de15164bd37bae92847917176617bc3f7f12b84b4e8bc3242899f1a9c5e0b3d2a5aa42264770df3b4ece647cdcae0a0e4592864f932d1c8499fe0b8cccdfacfc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6e7db9152e8057ba4a248a1e81e14bbb

SHA1
8a47f6391ccbc8b3f8209b4665b43c4b28b9a68c

SHA256
f953b929af9e82c6d11b0db509d9b31c9689625ad840fb738a0f236eb6aba689

SHA512
a24b178eb83f29a004bacef016b0482b4ad840a251e35cd89f5a0c3c73980c03a98bcd6d0d2f0bec49e7b368806cfe95db34da1c8a3cd3c991697c0c8bde061b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b9e07d48dfe8a6ce40035441849e9689

SHA1
891193cf3578a2c993039a97e79c572d8dba1c2f

SHA256
d590acced0b83ccb4baaa8abbc304e2c4a70a2df6aaf551709ce5e4fe7732f99

SHA512
c975516a3fe4441f9c172143a81be9e69f10e2ced13366e85e6b6f143d781d5b2805ea19eefbda0be8e5d06d7f1c6b8a1fb1bd8e618f5423a110c5427770daa0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
71342be249d9215941e999f17fd2bc7f

SHA1
2a27fd09cacfac7c7275a66b51beba31d0ffb2ab

SHA256
a072e0ddf850385e86fe08d21b06eb6c7ddd58d85b0a33b84d1ca5f5725e24da

SHA512
bf3bfe8d44a50e43eb1f0afdb0c7afdd61c17c310adfaea4039d9777ad6559fe5f922eb5120f20caf2be96ba02829011cf19e6a0aa00f1dc59eeb859c5d03742

Download Submit