df320ee310e081ffed4fdfda178474123d7e41c90cd0f4ab2783eaad7062acf7

Analysis

max time kernel
137s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
25/07/2024, 16:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7052186e96976e926927c7a065ef029c_JaffaCakes118.html
Size

59KB
MD5

7052186e96976e926927c7a065ef029c
SHA1

35f6719a9bcd8fb8c6b7535e4207b0108b5e118a
SHA256

df320ee310e081ffed4fdfda178474123d7e41c90cd0f4ab2783eaad7062acf7
SHA512

622f204857ddcf83dee6ac0c223741278335db3d4d861b2a063f0825423c95e918a6277a3896ebf67171f2736934919a1a523790b98c9fcd87242cfab1a5ee51
SSDEEP

1536:SEtCC9aS+gjvINXRJOxlO/gbI93EIch9UKPA97bZHFBZHX9dSYxF5/9vgShqK:SEIevdx+19UIch9UzRxPH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4976	msedge.exe
4976	msedge.exe
3680	msedge.exe
3680	msedge.exe
2424	identity_helper.exe
2424	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3680 wrote to memory of 2228	3680	msedge.exe	84
PID 3680 wrote to memory of 2228	3680	msedge.exe	84
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4820	3680	msedge.exe	85
PID 3680 wrote to memory of 4976	3680	msedge.exe	86
PID 3680 wrote to memory of 4976	3680	msedge.exe	86
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87
PID 3680 wrote to memory of 2692	3680	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7052186e96976e926927c7a065ef029c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbcf3246f8,0x7ffbcf324708,0x7ffbcf324718
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:8
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2940 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5576 /prefetch:8
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5576 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5732 /prefetch:1
  2⤵
  PID:428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5856 /prefetch:1
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5044 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7754256130681379607,11045422653370510173,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2784 /prefetch:1
  2⤵
  PID:5212

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3464

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4684

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2f842025e22e522658c640cfc7edc529

SHA1
4c2b24b02709acdd159f1b9bbeb396e52af27033

SHA256
1191573f2a7c12f0b9b8460e06dc36ca5386305eb8c883ebbbc8eb15f4d8e23e

SHA512
6e4393fd43984722229020ef662fc5981f253de31f13f30fadd6660bbc9ededcbfd163f132f6adaf42d435873322a5d0d3eea60060cf0e7f2e256262632c5d05

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
54aadd2d8ec66e446f1edb466b99ba8d

SHA1
a94f02b035dc918d8d9a46e6886413f15be5bff0

SHA256
1971045943002ef01930add9ba1a96a92ddc10d6c581ce29e33c38c2120b130e

SHA512
7e077f903463da60b5587aed4f5352060df400ebda713b602b88c15cb2f91076531ea07546a9352df772656065e0bf27bd285905a60f036a5c5951076d35e994

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
3da1bcf762c227fa9b61803eb94f867a

SHA1
bd1ec7cca34083b2f8be6ee7b8375d853725756c

SHA256
1e3af83ea21e79e1807cb5ef224a9984226a8e3d804f5b2929b7b8da641fd2bf

SHA512
43502b2775703b278eb5c5bb68f347ffc902bee634793fe1990b0cd0dfdcbcc6cccb710d66731a4beb53c805bed53fe9b45914d2dc238f120b5b756eb4b62aff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
d8c153f7f9560d8e57769da52aa9f0d1

SHA1
de6760f91e9bc0122f784fe48f2eb61d7217fb4f

SHA256
51677671cea4cbe4463e7f8e8400305de48eb79d72932864b2b49d2a2edc3a4f

SHA512
96fdc3ff679cececd784eb2098b032ac66b7a6f7fd5c702de166fd594f66a3643af4158a40314bc58421e0a14aeb823f7d3d2bbe8bc892ad26dace94a06ee98d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
183340f2130d2a9caaab655849ca5ff4

SHA1
49c2ca5ee78cdd3598af6d2e8a77b8e5601aa2e8

SHA256
189cbc77d9e4b5b9499c1df1c32cfe4550ae2b1ed6b30ecb5c1e372b15121ea4

SHA512
4bd0ed6c10e20f32acd699e40028d08114595d0d1251e081dab6783c0c43c77d5382501de9acba4b84adeffe72f30c64a04339ed0f34ad1b7143f1e9d99681f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fabf635a4cee7692c677c8372becb86b

SHA1
31acfb11e06c980e08ee8f46be60d816cc9ff499

SHA256
4ff208d5da40fc371a94a2d6cef936f6a1f52d7555f2434acb5f9ad10a465c08

SHA512
87dfc75ef60d75fe30386c027b9eadaaac9bfe965c570c8ef7d5a0329c6c00d56495a645cc0d4440ecb46bdf8c2f571730d061b9f57db44ef3ab9f1cc53d3016

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
ed397bb4b8b83d662ed56dac7dedccd5

SHA1
68a738979c334f445aad630f494ea2f07a7cd2b8

SHA256
ec72c731323ee6976560769d5cb1638a629eb34c97436054e4c63a99cd0b810e

SHA512
737824265092f4c100889852e1e302cc76683bdf9b805dbd19b545c99fa6eb6bab02083d2ddf8b674796806c0a52c54471aa572bee370e50dd928f4715938b96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
d96f257d60eef7e7f7d28a714895e997

SHA1
a7a107567356ead91da53ec2ff854cd53ab6b2f9

SHA256
1a0bf9874d9b2b266ede08bf750148cbd6902466208ea31ff52ab39731e4e02b

SHA512
0e12cb991ab9eaf2437ddaa0928f6b4a8a744263087aec9e4c89d6c2c035d355932c3f12549b92d6a068b7800712809aacc31282c073e30e72ac906f227445f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
a0da049ee0c8ddc3b41bd807cd44d4a5

SHA1
9f76f1e0d6a97baf78ef017885cf272385b1347e

SHA256
b515be5bf9d7f1d180d4364077cebb7e8356fa2ac50850b8cc4178b002aac909

SHA512
98031655f7e11a0cda04d7c977de064da878290ff5edbba8ca339aab5277f3eb847533c517c4f15ea7ef0715293ccd40eb933c0990eec7f63e40bd31690c960c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
0c3767860bcab34c1b2ab349160d7116

SHA1
ac6113f88c4c7838d7af2727659eb2bb3896f301

SHA256
2e105ab1771e2dcc6d539844508f08bd6f2a57c20cce4d0d0a045be2f6f14190

SHA512
a48f757b542f5e9e9086a841ac80ef9d84d9e43b13c358eaaf106d5ada53317fb97f63b0102c7042cf0a10db0ed2894bd2df0d986a0d7fbde0c859804133e3fc

Download Submit