85540a1e94f3c2bd6d6593dee9ef60d783821f4fb71811a3f57d8ff2c0c121fa

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12/07/2024, 04:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3c0686e273655662170b7db8442d6f2c_JaffaCakes118.html
Size

1KB
MD5

3c0686e273655662170b7db8442d6f2c
SHA1

ebf0389da1454e55933399165b9257f009fc4dd2
SHA256

85540a1e94f3c2bd6d6593dee9ef60d783821f4fb71811a3f57d8ff2c0c121fa
SHA512

08bc639b87773195f5cb33aa2aee511d5c973cf2cd12d0b6e4557016421b09c35b083bce499251b1c37d2b02102ad8cd28f9aa77b355a69654c95b9b94a558a9

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1992	msedge.exe
1992	msedge.exe
2496	msedge.exe
2496	msedge.exe
2168	identity_helper.exe
2168	identity_helper.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe
4944	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2496 wrote to memory of 3456	2496	msedge.exe	84
PID 2496 wrote to memory of 3456	2496	msedge.exe	84
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 4752	2496	msedge.exe	86
PID 2496 wrote to memory of 1992	2496	msedge.exe	87
PID 2496 wrote to memory of 1992	2496	msedge.exe	87
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88
PID 2496 wrote to memory of 3512	2496	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3c0686e273655662170b7db8442d6f2c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff905946f8,0x7fff90594708,0x7fff90594718
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4124 /prefetch:1
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4080 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2196,3679725386607156688,16813680999639062797,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2972 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4944

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3044

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2584

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
eaaad45aced1889a90a8aa4c39f92659

SHA1
5c0130d9e8d1a64c97924090d9a5258b8a31b83c

SHA256
5e3237f26b6047f64459cd5d3a6bc3563e2642b98d75b97011c93e0a9bd26f3b

SHA512
0db1c6bdb51f4e6ba5ef4dc12fc73886e599ab28f1eec5d943110bc3d856401ca31c05baa9026dd441b69f3de92307eb77d93f089ba6e2b84eea6e93982620e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
3ee50fb26a9d3f096c47ff8696c24321

SHA1
a8c83e798d2a8b31fec0820560525e80dfa4fe66

SHA256
d80ec29cb17280af0c7522b30a80ffa19d1e786c0b09accfe3234b967d23eb6f

SHA512
479c0d2b76850aa79b58f9e0a8ba5773bd8909d915b98c2e9dc3a95c0ac18d7741b2ee571df695c0305598d89651c7aef2ff7c2fedb8b6a6aa30057ecfc872c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
4f55232393c1397a4d13687bb707a49d

SHA1
7b2ef271d723a98625e9b02ea1d7cadbee0a7c5c

SHA256
43f1ed0a800dda1b0730367b4ea6e87463e78bc2638d9cf2033b881c0aaa0870

SHA512
007870207f62bfed8f54ab9fbf2b27064b49374a40ec42a4cc10d9f96801af9a6dd1a7998d61aab59eaf4d817f273e3bf6e238fe583e7796ad6650c64bb174d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1023B

MD5
0c2a714f0a264d536ec69f784df8f57c

SHA1
c7e03a2d83aa081035be69bd2baf18c392558532

SHA256
5e7f7db944484436edec8d6a26c220694dec7bfd576b21b135dac5e6b497be76

SHA512
31c3f7a7c56281806c01720879d73e0a1325e8e443a69a339c9de0ec2274af7c5a1c5c7a8fe4170801dc2bc40970f46e56a9334024c3054392cbb88a4ea83b2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
527b388411c795610b7807c972ca872b

SHA1
838aad4fb4cb1bd5a21d747be7082c32c1f0e6b7

SHA256
c50e337d459924c9797c16737c1a44ec5923aa3dbfbfe067a9ea8c784233cb90

SHA512
8114906257c95a7db666d9471436836e96d2e20e15d955eb2308fad953f3a69aae5c5526617371d6bed6f29ada9e1d6bfe1f3f8fe7c53aabcf2118ed6f768143

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
677c5ee8d1bd39f93ade4805797e0b76

SHA1
9461039c7869c9458242a2f15e971cbb2eea7d12

SHA256
40f436acac7eef075dbe0cbeaa8c2b05d0e794b5a1737c84b958d23c8368585b

SHA512
b0a73f1b1a29b6560161e6dd6396debe7fbcfb73c656c09b40b83d477d2875edf2040aa70d51a3bf430b4ca16bd1d074604b182fc31663ae119c211efe4ec8ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
87cc8297e7df14da7b3a9f5464d1fff6

SHA1
96d7471ef5edd8b4b4a22b9d925ade018b1fea97

SHA256
d760d7cd94321b8c706afd4143030d7ae56112fcc9c7cdc37890710f6c8549bf

SHA512
c322674f7d4d3ae74031d85d33d4443bc5cc24214bb5a581e5fc379c556ae2b3b983c8fb3a70e9d697c8018a7381b7095d0cee62dbfdfe6130ec9213883ee39c

Download Submit