acd5dcdcd783cf45b1674a9278575bba333534e4dde7b6e0b1413551b7d3f710

Analysis

max time kernel
145s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
24/05/2024, 20:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

6fc12bd978172f33e1b26ad433d3622a_JaffaCakes118.html
Size

9KB
MD5

6fc12bd978172f33e1b26ad433d3622a
SHA1

3aa5759f074ca6bec691b161c0af78578519ee5e
SHA256

acd5dcdcd783cf45b1674a9278575bba333534e4dde7b6e0b1413551b7d3f710
SHA512

a3983c5b7273299acf61c234cbb79477ce24a0b3eca800af72e4e65e1300177c610ab2e2391cb46da243fc80c5ddfe82ed3e877967040053ab03f390dcacf9fe
SSDEEP

192:2vUeRd++jlRAmW3jppWO6FM1N6NbRd+iE7RD5NU:SHV8mOpqNHINU

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4648	msedge.exe
4648	msedge.exe
1932	msedge.exe
1932	msedge.exe
5036	identity_helper.exe
5036	identity_helper.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe
1932	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1932 wrote to memory of 4472	1932	msedge.exe	82
PID 1932 wrote to memory of 4472	1932	msedge.exe	82
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 3280	1932	msedge.exe	83
PID 1932 wrote to memory of 4648	1932	msedge.exe	84
PID 1932 wrote to memory of 4648	1932	msedge.exe	84
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85
PID 1932 wrote to memory of 5004	1932	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6fc12bd978172f33e1b26ad433d3622a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9303d46f8,0x7ff9303d4708,0x7ff9303d4718
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,6410767208963622035,11362713358902463868,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6012 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:212

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3180

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1988

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
537815e7cc5c694912ac0308147852e4

SHA1
2ccdd9d9dc637db5462fe8119c0df261146c363c

SHA256
b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f

SHA512
63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8b167567021ccb1a9fdf073fa9112ef0

SHA1
3baf293fbfaa7c1e7cdacb5f2975737f4ef69898

SHA256
26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513

SHA512
726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
c674aaf497f3742b8f2bec3f4c331e76

SHA1
cc4ed5da79e25493c87ba0b723f303ff38968cfb

SHA256
95358563e349eb0ba29f69f2c80c14a20915c6fb0888dda5c8925936e739cd31

SHA512
2a8eb17076a05f646a0e9fd4069732ac291abeafdc4d5ff8ab0ec25cd82a1529ee4e71c7d1c4806871a52f72a417e5554b4f9db50c1c4b9049b6a5e42efbe79b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
408585ca576f612cf0727ef4f945f800

SHA1
ef410c171d36fc2fe72dcf0bfbe0dd70ac489359

SHA256
9daeb340c82c4b6b64b0e2670cadbe40b3f9b68e87c6b8d42035349b7e98d028

SHA512
141def4e76eb1b05ba870930d47e2b3a8873ccb994cdc3b3906167799a88b6685d2eda7c4721554a99b2ee0149d6c82d17678ac8d5a42a60da07f9a76255ced5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
492B

MD5
adf24791e855b6b7ecfb6f3fba9df31a

SHA1
0aa23421cbbed1b6c7cdf58f45815fac35d49870

SHA256
3399edc3a265ae7cc0fffc545321a7fbba275d2aad58fb7051645a71892f1734

SHA512
49d52d1dedf649fccc12131c6c1d62de4677012540d66155f3a75b22edca145b9c885893fde35180eedc7560e904df404ae0c0c2ffa4010d10ca0b1565618a0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
727B

MD5
50eeb0fc8ace8bf9f337b952b08f6891

SHA1
e10d97c4d6f0faa3f8f545294a2bb7f566ac6bcf

SHA256
e1fbd034faf547f04af0bd46dc3a12a958010f8e14efec06c4a81d92a1b34e89

SHA512
f9ef32ad4665668bc5b4b03bc77f2b48f03fd77aac98481e722ddc014a434847e03137331fcf64dfc125bf52a8ceb80eb74b70d534ed7fa80b30d119e4dc0814

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
aa0d525cd5d25267138313394c3590b9

SHA1
2ae4d966b91c9afc88ac5eddaddeed28513aae88

SHA256
765a7ecf5e705af35b4775cd2f1131c2e6761e3eb047e35acd3b51e5c6a6e150

SHA512
b4535e2752308502af92427de756afd48fc71df90123c7055bbe8b40ff0b27de02f1293821f84a1d657197e7f1e0280bc7c439a748fede5977f76adbce5accf6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7eb5b1807f2b677aef12816b95ed4168

SHA1
ad0a0a87cb8af970108ee250fd524c8707ad1e33

SHA256
541c1aeb19ebf7c986c41fa6a882e09f4921bc70a43d273ed4cd46becff8219a

SHA512
1919796e8e3e7bb87dcd13eeaf897cd3c9a5fba3a54318e28342ea44b376c42ca99e4defce1fd26e9998577882b7796cbb54adecffa9f457d7ecb1a96e88404f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
c1ecbb3a41f7c853fe1f5b3c629c3e70

SHA1
ede0cc0093a6d4c25b6578b0d42735ce0464d2cc

SHA256
24540fc7f0b679eea8604a5b12bd86cc27ff88012b9af60a1d14dd28fffe1e6b

SHA512
b654036f8351265f68000d8111cd7bdccf8b94008662d868e69a42c12fc8d536e7c8528a1d7efdb759a25e18bc43bf16671ea695c9a2bf207729b19186b5800e

Download Submit