8d8caeca2c1acd9b15225086327f0f0484d436359126289b249cb577a181f5e5

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12-07-2024 23:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3f5cba37a12afc10cc32b4cc2503a54b_JaffaCakes118.html
Size

236KB
MD5

3f5cba37a12afc10cc32b4cc2503a54b
SHA1

7eae45a0ee44f03cf5e0936176e09f22dfe21cc8
SHA256

8d8caeca2c1acd9b15225086327f0f0484d436359126289b249cb577a181f5e5
SHA512

e07d249089e453bb86f6544808d05ed23132e8eae5f7d4edf44193dc2c5b69366d486288f7aa3119e85ea47e5f399e4062b5938203eed3101855c7566a0afdad
SSDEEP

6144:oLyBGBFBQBeB2BBFqJjxBIa5IVz7ESXXDyJuC3AG:eyBGBFBQBeB2Br+mzlypAG

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4772	msedge.exe
4772	msedge.exe
4948	msedge.exe
4948	msedge.exe
348	identity_helper.exe
348	identity_helper.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4948 wrote to memory of 1156	4948	msedge.exe	83
PID 4948 wrote to memory of 1156	4948	msedge.exe	83
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 2936	4948	msedge.exe	84
PID 4948 wrote to memory of 4772	4948	msedge.exe	85
PID 4948 wrote to memory of 4772	4948	msedge.exe	85
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86
PID 4948 wrote to memory of 3616	4948	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3f5cba37a12afc10cc32b4cc2503a54b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff91d1546f8,0x7ff91d154708,0x7ff91d154718
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6028 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4068 /prefetch:1
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,14103894262193708017,12412118889530744800,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4776 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1508

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4436

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3496

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
584971c8ba88c824fd51a05dddb45a98

SHA1
b7c9489b4427652a9cdd754d1c1b6ac4034be421

SHA256
e2d8de6c2323bbb3863ec50843d9b58a22e911fd626d31430658b9ea942cd307

SHA512
5dbf1a4631a04d1149d8fab2b8e0e43ccd97b7212de43b961b9128a8bf03329164fdeb480154a8ffea5835f28417a7d2b115b8bf8d578d00b13c3682aa5ca726

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b28ef7d9f6d74f055cc49876767c886c

SHA1
d6b3267f36c340979f8fc3e012fdd02c468740bf

SHA256
fa6804456884789f4bdf9c3f5a4a8f29e0ededde149c4384072f3d8cc85bcc37

SHA512
491f893c8f765e5d629bce8dd5067cef4e2ebc558d43bfb05e358bca43e1a66ee1285519bc266fd0ff5b5e09769a56077b62ac55fa8797c1edf6205843356e75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
f5822afd2c5b32db6aa6ceb2ac4dd7ff

SHA1
62d27a09abeef4bf7bc019a6f71729dc8640ff33

SHA256
6ae4f8f7fdd51f491fa4943169683d2c3ffd6b4a79b3509a42c3521d306af745

SHA512
77b9add5e266b552806a08e326be826c228cbabfc0a971500186f1773f26fc20ea405c1c62d756c9b381dc2b653f3d1373616a09741bb3c1f14c7f772f9f8170

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
17004783142241e51cddf98f1e507ce8

SHA1
410a64914e5896699f4cbce8b668ae6ccf4c9f9a

SHA256
ee8e9654752fa26a8cf608982114cba43439fa3becee4f59a8f23ad0260e4ae4

SHA512
1748ba1c4374883938260f4655c29d16e2300255527cc9e822275a4b544df7ae119a6b391c784020bcdcdb2d122854197172a5d2d2b02ae035db6c19682d1014

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
5b993eff07ff8d3d551965d8b0166933

SHA1
4ef7689642de5e4dd002ba450cd23393657ef5e4

SHA256
64bd1219682283d9949d6abac9c8480d16ed2fdb9575e4f6d5e89915d5b6bf9e

SHA512
086b2ab6be294eba1961b7bddc26519b5cea18b05ea0c7e749623d79866708fbf8329d2fdb49281570b272767bc39e20bb18522f1c64625131017959174a8cc5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2b4b585689e2b43bd571dd6e914f2fda

SHA1
7fd45397b3dfe7debc99770b7d1561b95636bdcc

SHA256
792ac2c3917f81228891c6e20056ad132cd0dc4cae238b72af978694ca1ef346

SHA512
52272e35f8d3e10768c4b1fbb5cbb9132af907f46ff556107096385a49f52174fa9b60f497a17a96a831e4e8964f4eda327717c933873788b424e1cb3919586a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
5a6f273a388bc407857612836e35419e

SHA1
5370626f7c8b3c294c41cde312e6b011c65d14f0

SHA256
38c780c083da2a1a7f5507b8aa561c1a1fd190285f39f4f62be2ab93c07f0827

SHA512
47d311c05ee595456b6d9d381e9f7874c21801b8bd482e7855778875e341e5d2887e8572ece9dbce58a5a26aa9eb8b8542960178dc42ce5dc3d46dcff011e3e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ea151b90ccec8c04c6a9f3c3fc0ab195

SHA1
f16938e417d691a47ea1571d174c5878014df84a

SHA256
615914a3462bb1a23f234af3e272ea38581fe3913292b0120ce047b08cd48e02

SHA512
8f0f4de3095da49cc6c2342acb5b9d9e12092fb2e6795f4fcde608703baa477c96700348d732caf6f37e44aaf03167f2bf9e008f4e90af425dc9c3078a2a4d8d

Download Submit