fac55ed49a4de5a8719982fdb9c57d9421d916c0e86f64d77cd514714a43ef01

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
12/05/2024, 01:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

379a03085dd1714250e66ac30b2f9ce5_JaffaCakes118.html
Size

13KB
MD5

379a03085dd1714250e66ac30b2f9ce5
SHA1

bde0c7eb2f955037f04e2896dac486eaef864afc
SHA256

fac55ed49a4de5a8719982fdb9c57d9421d916c0e86f64d77cd514714a43ef01
SHA512

75c1e03f42428757324daf9b4c4a7b4a11533a907e031f5efbb80e345ab3e64c7966a8f6721140037042b1a539471ffcbf33f7440e34fe71a6a320ae1f179573
SSDEEP

192:Id3MX7HAtTfF2udOkT3LR0bwyBFvQu7ZcPaWLK81gnSseGMZJB798n/0lOslxzc:I+XzkT3LScynYPPaWLK81gSBdZJRR6

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
856	msedge.exe
856	msedge.exe
3012	msedge.exe
3012	msedge.exe
4652	identity_helper.exe
4652	identity_helper.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3012 wrote to memory of 4344	3012	msedge.exe	81
PID 3012 wrote to memory of 4344	3012	msedge.exe	81
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 3544	3012	msedge.exe	82
PID 3012 wrote to memory of 856	3012	msedge.exe	83
PID 3012 wrote to memory of 856	3012	msedge.exe	83
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84
PID 3012 wrote to memory of 380	3012	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\379a03085dd1714250e66ac30b2f9ce5_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffef94246f8,0x7ffef9424708,0x7ffef9424718
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2528 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:8
  2⤵
  PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4092 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5992 /prefetch:1
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6032 /prefetch:1
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,7361244017684018427,5172418720685979541,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4908 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4924

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4592

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2912

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f61fa5143fe872d1d8f1e9f8dc6544f9

SHA1
df44bab94d7388fb38c63085ec4db80cfc5eb009

SHA256
284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64

SHA512
971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
87f7abeb82600e1e640b843ad50fe0a1

SHA1
045bbada3f23fc59941bf7d0210fb160cb78ae87

SHA256
b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262

SHA512
ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
2ea99900f7f73f305d760ede689f3a27

SHA1
a2e6aa095aca3d3d1c541e5779e4866a5987cbfe

SHA256
64f5c67409f8f5ed995a2fb504645b35931b620d68adaec2d97259129c605581

SHA512
e97bf56c51a0b739b323713622d27b77d9e732752748a11f2aea7e287873c8ec4c1c19c8f576cd07da8ecefc6eb093baf795490f2dbaf411b5247c0c78486f98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
486B

MD5
7954373e4e249831e594ca11acbfc898

SHA1
dc0d65ee2206f369ef95c6f0df68dbf34ceafb4b

SHA256
ce219d73207f71d2615f1c2ebf1c4eb1760691af81b1005ecd3f162c608e65a6

SHA512
130e45ada4d1fbd2341e2d83996721ae117bfaf6d51d4b7202ef2efe29e0119ccea003deb7f49a48425954363edf2b4359e97b053ce46c447b90ccf6390c1834

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
968a2014beac7198200d812da5c2b6dd

SHA1
870781c44388cdf44a514b0e731f79e2156d83de

SHA256
3232ab46d1a14e1db81277d40b56a6a3d866749bd19d989328104bcc7b875744

SHA512
ec0257b740ba534d456271fb617a2aa0b7ddd818bdfa649b7f33aa34e651b9d441491df3e411608171bf43a4b39cc0603162d30a6b4420596a6668df0c2314f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4fc08502bf4a89930962228f8ce81238

SHA1
e262b3f6c95479363e69dc2278d5e144585b58d8

SHA256
3e0dd561ebb9a203ccef9f6cce39f2bb7016b131be47da7267d6728b9327bbb6

SHA512
5a89b23160c1408b83990a1578ccb403ae46448e8937b7c919a5885284bb8c16d5d205b317ae1d107e2000e2109b378a2e7a9c0bef845580b4e1eb1f26f7f3f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
875B

MD5
d79f3dfa502a99e7949cc01b766b8a0f

SHA1
4b3f2dc2b3b91acb67d26a73a4e489c755b69db9

SHA256
7fd4e37edca8193c0045485fb0bc7f14825cba1cfde5fee76dfc4a1d551a8f01

SHA512
af519a1ec55e23de252f30eebb731bf863186dbe1570a1d430bcb545f692779fddd15b8303771b4d04682f00d8309bb680cb16285d079647f4f80e2bc7d9fa96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57a383.TMP

Filesize
875B

MD5
bc78456013238273727004a6b18ea70b

SHA1
fc3851e21392a0464d74950de8dcb3daad8f68f5

SHA256
4c6355cbb143b6a37cac374236d815a7471814f551744154398028a52102f68f

SHA512
c7c715c3453c4df771e828f362dfa91feb0996066df4f77d1c3f2418ac95afbc962f603ba3c57553efb4410cd8667364f0c124cae94650b5686b0f5b63b3ca29

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
fec638b05c055d7a210e26c220ed99f6

SHA1
848863514f291106d8202980cc4d862f6c9b467d

SHA256
fd04c4065a9059b22717aed07056b959070dc4a490101b36ae43867a41b9d477

SHA512
177d9c1f7d66edf35c2238ff82e97b9d71420fb7ab5c58218dcb2c46c05fc53f9bc5cbc09bfabc64355db16327893edf92ea60ad91336e57fe51dca0622152b3

Download Submit