255f0e96f8d19972cc82e24e46b27db86cfe2f4953958a633ed6e5681239b90a

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
07-05-2024 22:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2214f0c26b8fb0ad0df09965ec641fed_JaffaCakes118.html
Size

31KB
MD5

2214f0c26b8fb0ad0df09965ec641fed
SHA1

9e33e8dea858371e7d5abdbcaef321ecc2964d25
SHA256

255f0e96f8d19972cc82e24e46b27db86cfe2f4953958a633ed6e5681239b90a
SHA512

e71af0a1c3a230fccd80b1d8c9597ef560431c517ba776cba9eb773e6d5283f37bbdd63f37a90a93f68ded50558983ffb8fac28c5f118c248ab519d7ae8ca73c
SSDEEP

768:8mvXvV6BExF7wxx9JKo7zFuQKMIYoOmjWDupIH+Y/SHE:8mvXvVuExF7wxx9Yo7zFuQKMIFOmjWDn

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
544	msedge.exe
544	msedge.exe
1452	msedge.exe
1452	msedge.exe
3848	identity_helper.exe
3848	identity_helper.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1452 wrote to memory of 5064	1452	msedge.exe	83
PID 1452 wrote to memory of 5064	1452	msedge.exe	83
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 1936	1452	msedge.exe	84
PID 1452 wrote to memory of 544	1452	msedge.exe	85
PID 1452 wrote to memory of 544	1452	msedge.exe	85
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86
PID 1452 wrote to memory of 2816	1452	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2214f0c26b8fb0ad0df09965ec641fed_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff88c4c46f8,0x7ff88c4c4708,0x7ff88c4c4718
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:8
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5732 /prefetch:1
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1120 /prefetch:1
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1948,6071541397284457682,3620616165451846204,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1876 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3492

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2400

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4156

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4e96ed67859d0bafd47d805a71041f49

SHA1
7806c54ae29a6c8d01dcbc78e5525ddde321b16b

SHA256
bd13ddab4dc4bbf01ed50341953c9638f6d71faf92bc79fbfe93687432c2292d

SHA512
432201c3119779d91d13da55a26d4ff4ce4a9529e00b44ec1738029f92610d4e6e25c05694adf949c3e9c70fbbbbea723f63c29287906729f5e88a046a2edcb7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1cbd0e9a14155b7f5d4f542d09a83153

SHA1
27a442a921921d69743a8e4b76ff0b66016c4b76

SHA256
243d05d6af19bfe3e06b1f7507342ead88f9d87b84e239ad1d144e9e454b548c

SHA512
17e5217d5bf67571afb0e7ef30ac21c11ea6553f89457548d96ee4461011f641a7872a37257239fa5f25702f027afb85d5bd9faf2f2f183992b8879407e56a0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
1d98f2f5c0f83b81497b44168583f466

SHA1
94b0a94d3ec8e0267d4521917a1ae18b0c7adcce

SHA256
b04c3620ddbed26c713eb124b43e2823a1bb3816cfd206c185d0a39ee1094b83

SHA512
01f40585dcb8d6c49993626f68602dc0d9364b92e2955ddbc59448d7af399f8b2460c55d2d03a9c80713945460b40a674c752fc0a6621f300a7061e0f0dd4b2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fe33c44e587c4774bba67493173329c2

SHA1
01411868ae4ca6752c9bce8cfece31f08f2212bd

SHA256
c18aa8f6f310f6105c3c4283ffbf1f00cc6ac09e8a85d3c0b39755772df86b78

SHA512
cba08e328449357cf6ebbfe17763b08b35fed76ba574172e5fb58dcda828b538ad457d042bba6c4b65295c0e9ddc25402201b1fcc7d3e937c6553decbd6965e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
4d2b33387d0ef796ede78f7ff441443a

SHA1
d9638bad8ce1c2a57ba0ca02408adfa324d3ae4f

SHA256
422b1958041ffa03883c97b3334a20a709c59b8853b87974df68f22b0a29f94d

SHA512
b1ce0a5d7467241d4dfa96d5c0e1f20935044f02cca0b39a195beb42181f93f0a0625703f554646b90e0dacccf3d115b7ae31613bfd82c7ccf6596355c2dc371

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
df7105689a2c6cd6e614cafc6610b10c

SHA1
4115900b88f154683352db386981542972efc1b5

SHA256
4fd0a4ed5a4e0fec9afbb554ce17e15843e608ec0b239117d8689fc22fa3893e

SHA512
492bf8a02ddf3bf0165d8fd4416a67c712a787f5ada2a8ddcfc54b17ed5b02ff8234fb83832f947c3633c9219425e8face1ab440723a83919843758263157be3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
7d17e1b3b710a6092206c548bd309f80

SHA1
5d4d2920138395fccf7b404d134d1d1e9572bfea

SHA256
8e3f842cb39a5fc48ccf7ab7a57fc2424ce460e2fc854492278ba46fb1afce6a

SHA512
5539cd97756a69197e3ad53801ec49b0a1ca3f08ef4ce153a8c31f40282292161842857ac02ab733c14af499b483c16b83f7671f7c0c0bde029cb6bc6f148a23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57a75c.TMP

Filesize
707B

MD5
c509c91d389b8059e691170b5f4e264d

SHA1
74a7ca15c51e064b036eea002f38f11db8141f07

SHA256
915f0014b9fa898e79990f3f93c8706eadcaec3484cd4304f3db64d1e6185f87

SHA512
223dafd599f6540282729f118ce9a1a2779fcc2ae702dd28baf830acb8b7870b4ce6ad2d49b16564cc5200a526077cc487e7fcda10b57848ae9a246c7883b542

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
978601e9f14081db292fa3a1b99d65e5

SHA1
0a247bce7d2f7c58e552d418ec9ae9980696be16

SHA256
34523e00f1f3a7e185286b542c8e9cb3eb8a8f8a2d237403d7838ab079821b51

SHA512
2c44e4ba166ce7ff4c16a48086cf102aff633e322eb355e2fb3a091aa2207f4eeeb078062927eadb5d0c43e2f4758d743a31532476ee84840684174644d52c99

Download Submit