16a6707baa93b1b4e5f87c67e4457fffd904fe6d82d856ea79f5007ce38fd3cb

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
16/07/2024, 00:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4c19e67166e3c7207aac453fb3ece813_JaffaCakes118.html
Size

58KB
MD5

4c19e67166e3c7207aac453fb3ece813
SHA1

f43f68c263e9e11884c4ae1d4c3f6bbb486d66ca
SHA256

16a6707baa93b1b4e5f87c67e4457fffd904fe6d82d856ea79f5007ce38fd3cb
SHA512

6e2cdb9eff353d366470830224f2c20653614f07670c081ea4ffb3a749dd8fa41539450de4eaf30ae4ab6662245a71b846eac04db4e7f8d80dd1b9e435f611a2
SSDEEP

1536:gQZBCCOd+0IxCfRb/fcfofdfhfpf6fEfefmfWfQftf/fmfXfZfTfsf8f5fPfVfxd:gk2o0IxYkwFZRS8W++ol3u/hrU0xXdpd

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4376	msedge.exe
4376	msedge.exe
3096	msedge.exe
3096	msedge.exe
2928	identity_helper.exe
2928	identity_helper.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3096 wrote to memory of 3912	3096	msedge.exe	83
PID 3096 wrote to memory of 3912	3096	msedge.exe	83
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 392	3096	msedge.exe	84
PID 3096 wrote to memory of 4376	3096	msedge.exe	85
PID 3096 wrote to memory of 4376	3096	msedge.exe	85
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86
PID 3096 wrote to memory of 432	3096	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\4c19e67166e3c7207aac453fb3ece813_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe4a2446f8,0x7ffe4a244708,0x7ffe4a244718
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4592 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5992 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,13955889608970414105,18006260135855301183,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1952 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2988

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:100

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2544

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
04b60a51907d399f3685e03094b603cb

SHA1
228d18888782f4e66ca207c1a073560e0a4cc6e7

SHA256
87a9d9f1bd99313295b2ce703580b9d37c3a68b9b33026fdda4c2530f562e6a3

SHA512
2a8e3da94eaf0a6c4a2f29da6fec2796ba6a13cad6425bb650349a60eb3204643fc2fd1ab425f0251610cb9cce65e7dba459388b4e00c12ba3434a1798855c91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9622e603d436ca747f3a4407a6ca952e

SHA1
297d9aed5337a8a7290ea436b61458c372b1d497

SHA256
ace0e47e358fba0831b508cd23949a503ae0e6a5c857859e720d1b6479ff2261

SHA512
f774c5c44f0fcdfb45847626f6808076dccabfbcb8a37d00329ec792e2901dc59636ef15c95d84d0080272571542d43b473ce11c2209ac251bee13bd611b200a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
0bec99a1171b97487d4d71dcaed28d2f

SHA1
1ac560199992ca029228df308138564b976b546d

SHA256
d8817d5c4010655d0075d892cfaf57b744944647afd22f27de19d78c16fa02cb

SHA512
dd6a9252d32174a660b5f34a2ccda925ff66bcaba81194ea83593f664f14e2e0e853d585f94a95538a65392292935f269a810c2fd43588924bc370875e6cc3b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
2e92a2cbd26abacf4f283eabe7e9d26d

SHA1
4dd38245d311702d26c7c004be12649ec7bcd8a8

SHA256
a3a051e525dc8a1b8e562ff66830fc061a06976c1312585823c96098dfabfba0

SHA512
eb4889fba3d9c4d39d6d91c6298c2b1ddfafd1eabf09db8fcec29deb21c5e4aea6c0af0025fd7d75bd8fb5d9c93cd21dc4db61d26dbe333f9b300469546e7918

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
02f065b020b9098245cfd56329befa27

SHA1
c8758bb4a523b421c5e050e28eaa0fdb4dc38e08

SHA256
ffef260aa05d4db6d9aec9b34d8769914f0714558d5618713c21530d28c545a7

SHA512
24e7edd008c0504d782c9dd11bb93d6175c6fb0c79e81c74aa5e72b32583c907c77f27a045a438703a6e3780c56c915646708cea732acbc9231f91dbbf36573f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
905161050dc9fce83b3120e88f9f05c8

SHA1
8e44b96e6803d0c36be63db40727468b97985797

SHA256
6d907b524b067709d4b3e6d7ce9e12f0fbbe1689491181f53e7336893d405696

SHA512
03518446586c25a945a1298fbf75e20106199336c734caf1a1fd49e043cd797b7908192dbd797482dc0e8d637ad1c445f5a657f4e4dfd198f9ce0cd2e141ffe8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
170c7e37828ca0d508caeeec2b9196c2

SHA1
a116240029a3b1cb5e957b0e316faec992d80971

SHA256
556b30c5fab098dab59323c3b8128f33699e96d803075048be4dc3e86fd9eb56

SHA512
8200af1a13f9d1a4fa847276a26143fad9e56365b6bf3ef6d58eb4c5febe9944158116efee63ec8f9d34f29aaf4630da21f05adbbfabbe4e75c52f04c2735f2d

Download Submit