eec482caa33418f3ae3f2c6dc63f943cbe3684da7ad88032f00a0fd5167535d0

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
17-06-2024 10:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b8290fe7be830ee82f07a9ca2cebbf5d_JaffaCakes118.html
Size

131KB
MD5

b8290fe7be830ee82f07a9ca2cebbf5d
SHA1

416cb8c3619c36e54a0746b921b0fc547a5104a9
SHA256

eec482caa33418f3ae3f2c6dc63f943cbe3684da7ad88032f00a0fd5167535d0
SHA512

6695cc37df2e301b39fe2d25791364500dab62e9f0e799c1ad73999f537ae69c6e173e0cd6f18d5dc8d180ea77b528b322fbb5045a485aad3726a1f225b64199
SSDEEP

3072:uCN1AvqWKiWj6OGO4TLJ5FmHjAg5OtL+5qlmSKiQc6sPKdo71pBeD3uUAnHl:h6q4TLJ5FmHjAg5OtL+5qlmSKiQc6sP9

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2320	msedge.exe
2320	msedge.exe
3744	msedge.exe
3744	msedge.exe
3512	identity_helper.exe
3512	identity_helper.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3744 wrote to memory of 212	3744	msedge.exe	83
PID 3744 wrote to memory of 212	3744	msedge.exe	83
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 1172	3744	msedge.exe	85
PID 3744 wrote to memory of 2320	3744	msedge.exe	86
PID 3744 wrote to memory of 2320	3744	msedge.exe	86
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87
PID 3744 wrote to memory of 988	3744	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b8290fe7be830ee82f07a9ca2cebbf5d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9b21546f8,0x7ff9b2154708,0x7ff9b2154718
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,20527257034391615,8436765240154700242,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,20527257034391615,8436765240154700242,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,20527257034391615,8436765240154700242,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2896 /prefetch:8
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,20527257034391615,8436765240154700242,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3156 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,20527257034391615,8436765240154700242,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3176 /prefetch:1
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,20527257034391615,8436765240154700242,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,20527257034391615,8436765240154700242,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,20527257034391615,8436765240154700242,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,20527257034391615,8436765240154700242,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,20527257034391615,8436765240154700242,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,20527257034391615,8436765240154700242,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5764 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,20527257034391615,8436765240154700242,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2660 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4036

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4700

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4280

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c5abc082d9d9307e797b7e89a2f755f4

SHA1
54c442690a8727f1d3453b6452198d3ec4ec13df

SHA256
a055d69c6aba59e97e632d118b7960a5fdfbe35cfdfaa0de14f194fc6f874716

SHA512
ad765cddbf89472988de5356db5e0ee254ca3475491c6034fba1897c373702ab7cfa4bd21662ab862eebb48a757c3eb86b1f8ed58629751f71863822a59cd26c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b4a74bc775caf3de7fc9cde3c30ce482

SHA1
c6ed3161390e5493f71182a6cb98d51c9063775d

SHA256
dfad4e020a946f85523604816a0a9781091ee4669c870db2cabab027f8b6f280

SHA512
55578e254444a645f455ea38480c9e02599ebf9522c32aca50ff37aad33976db30e663d35ebe31ff0ecafb4007362261716f756b3a0d67ac3937ca62ff10e25f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
270B

MD5
53996c716b4bd887d58c74c39cd09692

SHA1
19e272cb7fccb40129325bb4e77cfd6f9cfeab3e

SHA256
5f968ef1d7dada6f56de72d950fc41732c1e7e77933241aa9abeded51c5032bc

SHA512
bbaf405a56ef25b0b80b985284b01e1c7ab36deee9f025cfe894d2fcfddc0b9f583aa30e5030d11f3f51a7b453d5d3b2b3d1181e9ac04a2c38393a0f03cc7f48

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
419B

MD5
108cd83deb5d7460925eecc951cda2a6

SHA1
9559fb31fbcd88bfe44dc7e82221ef4a6008069a

SHA256
d4780ab05fcf32a88516d3dd7c5528d44340d4f7e20f07daf7b1081aa80964e3

SHA512
57632648da3a7aa5a76d6375e1e7561b27adf0761553b5e10aac5a77aeca1cff399f7e1d089a3fb25e31a20e00821a3505b78ad304942b1f868967747c438f4b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d35bc0478674a68c938033146a7e985e

SHA1
107c1207b859c37c05a829e654377ca8d6c7449a

SHA256
905a193549f1e22fa9a9b295b369f9b86204d0bf6320ab350c7851fb3800175a

SHA512
1f6156653d22679b3bbd9af01df273cd2f78e66fafd7560f3f4a80a6419c30fda1d14a727718d168af3eddfe32bca12eb3697474892c89b0a908e2ca778baedc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
974302646e1d049e702bc114a31511b3

SHA1
aa52e2cdc3b42c2d13850c856002045c14b258a4

SHA256
dde871c9c1d8f979ed40cd01c9769462d74c46bc862e7c2584bebca6d7a72095

SHA512
d15ce28981fa9ff90eaa0161c885b41c068014606d1dec5929b48b22d994ff47cbd5f25514b4b042737537591da5eefe635c3547ca7418622870ce328ac25db2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
539B

MD5
3a709c4a60c2866abfa9c8b98a0a9cbe

SHA1
701350d379842912afe959e15704ec81468d6445

SHA256
bd0373e7f0935de848cf2a17229b7684bf62694aa29662abd14c3d51502b275b

SHA512
6a8ae0d04221218cb991c07f5fb884d62aa7758392c6eb9048ada4ab3418f9ba3af26a1f8f76cec50966c1455a28cd896d3a90547855b9af48fec4371e019bfb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58825a.TMP

Filesize
371B

MD5
3dcc02b0c9d4333a1d2e93d9e5797e93

SHA1
fb1f4677d2345d0164e7da24e0301de38f2bda36

SHA256
e108d557b8613593a5bcf95045d099e0930cec67919daf0b9f7f8d1a4a237378

SHA512
a66b36fb0d46d4e0f4ee2d579ed028042ebcb0a3c5db5c59ee47d331b3fc5dce8b6487914da9ed38bc2e7e589dbf3df10ec0bf2f44fc7cf8ca0d71462d7c03c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
4c22069092635074299e55e28d327d66

SHA1
d2ca3537b1bf262c480f271fd1c228cc641139be

SHA256
aa6372522828f40ad2fc28ea84d5702b9ad5dfb9c00e5c0973e9e3bc1707d670

SHA512
9a562917503032e6e24a292e3dad9cbfdbdab539ffa267dde8575d3e93524b7896c440dc563261893600680b5fe872875d988f20e670b9b72350dd2b19247a22

Download Submit