d81c0c1a65085c0bfae8ded4170dab6cc9d03309266121d07024e25f977730ef

Analysis

max time kernel
145s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
21/08/2024, 12:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b380460025147c74ba8c3a958b1a9c12_JaffaCakes118.html
Size

40KB
MD5

b380460025147c74ba8c3a958b1a9c12
SHA1

8fd411fcd9522937a14ed055d72ad7897aa88d89
SHA256

d81c0c1a65085c0bfae8ded4170dab6cc9d03309266121d07024e25f977730ef
SHA512

29a6b49ec3df0a468e03b8dc8fe89db2abb2174206eb03dbb9214aea21d798ef132003a9d976bb56c576bea9a861b306c6f534dd1fa63618e40f88fa340f168c
SSDEEP

768:S54SR2OGJtfw9DzN+5BpwgCRHs7BP1U1VSfY40hi+GUqDG+quOuOI0:S5dR2OGJtfa/N+5cBs7BP1U1AfY40hio

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
2088	msedge.exe
2088	msedge.exe
1388	identity_helper.exe
1388	identity_helper.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2088 wrote to memory of 4824	2088	msedge.exe	84
PID 2088 wrote to memory of 4824	2088	msedge.exe	84
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 3728	2088	msedge.exe	85
PID 2088 wrote to memory of 956	2088	msedge.exe	86
PID 2088 wrote to memory of 956	2088	msedge.exe	86
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87
PID 2088 wrote to memory of 212	2088	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b380460025147c74ba8c3a958b1a9c12_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb08a746f8,0x7ffb08a74708,0x7ffb08a74718
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2796 /prefetch:8
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4088 /prefetch:1
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6240 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4912 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,1920460384628739599,81410511657729233,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3000 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4280

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3196

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4128

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ff63763eedb406987ced076e36ec9acf

SHA1
16365aa97cd1a115412f8ae436d5d4e9be5f7b5d

SHA256
8f460e8b7a67f0c65b7248961a7c71146c9e7a19772b193972b486dbf05b8e4c

SHA512
ce90336169c8b2de249d4faea2519bf7c3df48ae9d77cdf471dd5dbd8e8542d47d9348080a098074aa63c255890850ee3b80ddb8eef8384919fdca3bb9371d9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2783c40400a8912a79cfd383da731086

SHA1
001a131fe399c30973089e18358818090ca81789

SHA256
331fa67da5f67bbb42794c3aeab8f7819f35347460ffb352ccc914e0373a22c5

SHA512
b7c7d3aa966ad39a86aae02479649d74dcbf29d9cb3a7ff8b9b2354ea60704da55f5c0df803fd0a7191170a8e72fdd5eacfa1a739d7a74e390a7b74bdced1685

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\42b1942e-15f3-426f-a29f-2526b92a0886.tmp

Filesize
5KB

MD5
07da74a198604fb72864b37660eb0fd1

SHA1
3b2c26135a60e039c4632660917cae8f2c752be6

SHA256
ff5ed4902f649b1267bc56d1aba093057421cf9d50520e3f1977ade4942cbe6a

SHA512
f6be31e8ad43d81d7fab361e1c280632436a54e58410bbf6582391539ff40106c04ead1a80dde83a3f00df92ed14320a1b0539650678193b698996dbcc2f8695

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
d376408137a2031c9a4a67fa60cea8b9

SHA1
382e1c4b949bf5494192dfd275df7f86c6a1c5d8

SHA256
8aaf6b0f9a3b0752464abfe815b8138704fb49d035c8222e62cf47011f695f53

SHA512
c00d21489ec344ef50fb0e7f52c007221984410a4dd7a8224e40e82fef03b7f1adfea989353f24be4e9b30a20b3616d528453dc267e19930a2812bc74dfbda26

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
b2352fbcf68225cc059575bfa8571202

SHA1
a444d56c11a40c9895f1f2a4da619c7a5f0b3987

SHA256
4360742fbd20eb67165ef3fcebc5d48a62197e9fb2a5f070a79dc5fe03187bd0

SHA512
263e2fbeadab381d2817d9cdb7f029906bd1b82a60fbf61442c1462a29eb71e09b360b7a26f1d7730393b9a5e948b81e0d8e73fddabb61336553738c02263702

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
537848f8c068b418a6278ddda20f5a1b

SHA1
fc819e4e28f223b261f536d82c437362a11c32b0

SHA256
588750bd6218bcc32727d44bbe787ad5547da65c360804a06ba0310000a3c2e4

SHA512
52720b3d5920cf40f55957c4528b60257efc81dc4e79ff1dd72f8f094e39afef5e0d72520dce86a7788d9c2e16fda6b2feafa1d6c7f3e83aeea2a69465c22938

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
de17bef81f0a2f57807dec140263fd43

SHA1
ccb66eb4b153a511baddeca1b65eb8c74c9d8669

SHA256
cecdd40671c3dbeb0955d6c656d5834809e407cfb0b5cf0349aba01b3904aee1

SHA512
bd7715861bab31f1dc51d219b47273a0b4341414600fdee83f289099fd7cc9a02e8da72ea3aa8dce5d06c7adb6669a8ab681720c9b813093f17b6419aa110be2

Download Submit