19bdf131580c77fd395f14554db7e21f69b08e3359aa3cd19a6501fee538df7d

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
13/07/2024, 17:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

429664cf1b8692ef820889b32dd657f9_JaffaCakes118.html
Size

20KB
MD5

429664cf1b8692ef820889b32dd657f9
SHA1

a62c14eac6bb2e05fb6acf53354a8dd2fdc63762
SHA256

19bdf131580c77fd395f14554db7e21f69b08e3359aa3cd19a6501fee538df7d
SHA512

7c7d0092a72327174f63621c65b692defd7cc81d4fdebef9e51df72fe616d2993dc88c5c228ef1ed1bfd0698a253b45cac6307f7878fa63dace78292730aaff1
SSDEEP

384:p66c4ZaVlZrEkvcaZujngkQ3QkJoB/VvuKI9DUyxCAJ2:rcByEZmcFi2KI9EZ

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
396	msedge.exe
396	msedge.exe
4324	msedge.exe
4324	msedge.exe
932	identity_helper.exe
932	identity_helper.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4324 wrote to memory of 3068	4324	msedge.exe	83
PID 4324 wrote to memory of 3068	4324	msedge.exe	83
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 3968	4324	msedge.exe	85
PID 4324 wrote to memory of 396	4324	msedge.exe	86
PID 4324 wrote to memory of 396	4324	msedge.exe	86
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87
PID 4324 wrote to memory of 3992	4324	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\429664cf1b8692ef820889b32dd657f9_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc0c9246f8,0x7ffc0c924708,0x7ffc0c924718
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2684 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4076 /prefetch:1
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2184,12565712408526235629,17238408116408025149,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1260 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3748

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3636

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4496

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c00b0d6e0f836dfa596c6df9d3b2f8f2

SHA1
69ad27d9b4502630728f98917f67307e9dd12a30

SHA256
578481cd359c669455e24983b13723c25584f58925b47283cb580019ef3142b1

SHA512
0e098ab5f5772fec17880e228a0dccbbaa06dc1af14e0fd827f361599c61899fe07d612a7f7b049ff6661d27fdc495566dd20fc28ceed022b87c212bf00be5da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
54f1b76300ce15e44e5cc1a3947f5ca9

SHA1
c978bfaa6ec6dae05464c6426eaa6cb3c3e2f3b7

SHA256
43dec5d87b7ee892a3d99cb61f772ba403882ac0772423f36034e84244c1ca24

SHA512
ac26e5676c675be329eb62b5d5a36a0e6014ab8a6366684b0fc2a59ae5f061f596f462b82eb4e9f135d2235a0cbd4af96680d234eecc873a8397fd81507d277a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
71a3506eed4f52883a0dd38db48ff704

SHA1
02615cbd0de931a3e67eb466b7d10f581a4ccf91

SHA256
b038941588df4b397a8fa19dfcdc5f3779c0651d185847394983078283a93cae

SHA512
dce641ba2868f61539cbdc2bf2cd5e3fefa7967dd78627e502509cd71c0e3f71a9cb627c017205286af6094667812b15bd0cc73e8bc6c86e4251ae8c9364b1a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c8a966d336615bd6c1b60f74b0cc5449

SHA1
4a81851922fd1bb1af8e468d21aecc74d5a0ee43

SHA256
bec0121eac58e052ba971dd914e4b54caca7c61d14c936157648a47cdafe8631

SHA512
96fe34db6a6fe1f105621c2894e57f178075e6f7658659a217a6356c90277ace748725bd11256ea18a225b1862a7648d46a0e6e1c1f0eb30ec1366fe3698c1ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d61d75833e194fb4ca27402d76da18c3

SHA1
3510d55b7266fc8f3eb81db20d04cd515cf68bce

SHA256
a6329e28a8c6c31f3e1304e9a2d8c529d77861e7d5ec732da621b553a1de6471

SHA512
3a4bdcb291ba03eaaecd0e28870beb5b87343b46eb723764910d1f75b06f0d6000e77cae0a53278d2c14a9744fb57eea8f8f8b2f4bd1bf2b516c0c6ae2d53abb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
521ce5cbcfdc4d4db5e954a3dcb3bc41

SHA1
c7d33ef0a5bf9c0c6a21759b8fbfaac657e9e51c

SHA256
a0bbfe6262845e2b6091382e7da00c316a7160ad3faef7ad6f893a5186bb2aca

SHA512
a4d11cec4b52f09e30c68bb7bb0c4e753294cd3fd4062940148562f115435a810fd6911ace23690b67304f8e9698b3e9368ddf519e630f02cbecf022f6847e8e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
7b17712da6befa88d3d35aaa3dbaf0cc

SHA1
c7dbc3774010dc436989bea3fc1400a01098f75c

SHA256
b78b03f542ebb8318c01ad8de364515250394a30e3709835af0fb4f0938ac90d

SHA512
aa247f2e59c6ca4f8e23de9fcec369b143eb2fa3babe9c5b7e2decf33e9fc6a36aa2c496ca4b729c80657bb6b870dabbef9962c807ed40ee5506924d41732e4c

Download Submit