793116ee4a5f6f26725006f016c9f145eecdaccdfdeb9e78c979d09ca0d221da

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2024, 00:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3778a450a90eba78b1be4021470d45c4_JaffaCakes118.html
Size

19KB
MD5

3778a450a90eba78b1be4021470d45c4
SHA1

2323a856b4325543258418d94b5198b67b45e97b
SHA256

793116ee4a5f6f26725006f016c9f145eecdaccdfdeb9e78c979d09ca0d221da
SHA512

1456e24f800828ea9b61730b715cf2bb8c357a6af09fdd468de057969a7f6c6a7b6df71f927718b46c3ca785d12927ec7985b69445e22bc3d6706cd470858f4c
SSDEEP

384:4+QfPFd9QZBC7mOdMw0tKfpC5IgSnbmFe7AcZ868FLAPd:Zcd9QZBC7mOdMwlpC5I9nC4/Pd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4664	msedge.exe
4664	msedge.exe
4812	msedge.exe
4812	msedge.exe
756	identity_helper.exe
756	identity_helper.exe
1300	msedge.exe
1300	msedge.exe
1300	msedge.exe
1300	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe
4812	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4812 wrote to memory of 2472	4812	msedge.exe	83
PID 4812 wrote to memory of 2472	4812	msedge.exe	83
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 2588	4812	msedge.exe	84
PID 4812 wrote to memory of 4664	4812	msedge.exe	85
PID 4812 wrote to memory of 4664	4812	msedge.exe	85
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86
PID 4812 wrote to memory of 2804	4812	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3778a450a90eba78b1be4021470d45c4_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcad9f46f8,0x7ffcad9f4708,0x7ffcad9f4718
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2480 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,11500028814234693948,10111219571273801216,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5672 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1300

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:756

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2580

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
bffcefacce25cd03f3d5c9446ddb903d

SHA1
8923f84aa86db316d2f5c122fe3874bbe26f3bab

SHA256
23e7cbbf64c81122c3cb30a0933c10a320e254447771737a326ce37a0694d405

SHA512
761dae5315b35ec0b2fe68019881397f5d2eadba3963aba79a89f8953a0cd705012d7faf3a204a5f36008926b9f614980e333351596b06ce7058d744345ce2e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d22073dea53e79d9b824f27ac5e9813e

SHA1
6d8a7281241248431a1571e6ddc55798b01fa961

SHA256
86713962c3bb287964678b148ee08ea83fb83483dff8be91c8a6085ca560b2a6

SHA512
97152091ee24b6e713b8ec8123cb62511f8a7e8a6c6c3f2f6727d0a60497be28814613b476009b853575d4931e5df950e28a41afbf6707cb672206f1219c4413

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
215KB

MD5
1585c4c0ffdb55b2a4fdc0b0f5c317be

SHA1
aac0e0f12332063c75c690458b2cfe5acb800d0a

SHA256
18a1cfc3b339903a71e6a68791cde83fca626a4c1a22be5cb7755c9f2343e2a5

SHA512
7021ed87f0c97edc3a8ff838202fa444841eafcbfa4e00e722b723393a1ac679279aa744e8edde237a05be6060527a0c7e64a36148bd2d1316d5589d78d08e23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
394c67b655598bf08c2126153f8f7903

SHA1
bae48903e79d8e8d8c7cefb296511a758f11da23

SHA256
a9b2d9ec506ed8edb20052951f85869f1f23996cf9b730df69a758e567f1c09f

SHA512
36be3aee78c1b5023260b14d2b90223c947ffbf2047219445ee5923e17815481e49ee8bfc7d88a6844bfc20381873ddd5c96e36d27cc78c9b6c3486025ba4c36

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
ac89d909557d96a5031c1e3c4b0144d1

SHA1
36ff40aa1688a706645341829558d874fddb5ebe

SHA256
4cee9d1e22432ccc5b88e7b7b309547eb9e73859afc0007ca37c93fc36658e64

SHA512
56394dd2c90fd98899da67da648dd5b8b8f9341c0031af418422f60a9da51b0c16caee1c641380486a3ddad08b8ced5d43fc3fe301cd511e5070fe8ad5a3de68

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
093b41336bd3e643a3aeeb94cf55ca69

SHA1
7349a6e2af180aa21f99ff39ad1ecdfd2271e1ca

SHA256
af14fdd1544c8613a8e096e0ca51b2aa82f9ac42bc274542c51ce004d2ff9acb

SHA512
55c78530ed0201e327514256798d135be2e1cf302df9287bb68666efb6d62e013d070359f246342cbf8c4e554561dd6552dccc233f2b0f9da143287c4ba8c071

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
64fe40281d4f4ae0d9f9452ae18638ff

SHA1
1d98eb88a1de7b1809cb9810060b270fbb14acde

SHA256
0a4a8c3f105f2ec54aee616402d19bdb6e16dcb817f487ffe6fc60e0fe267560

SHA512
7b74c611c7040db6d439e13c86e2fa32e88e3d283be3b6724ca71ce91c493999542d17ac0201e232345792506b399841823a9a73e207d226ab86e2816af6d579

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
974cd27af6a971fd101b65c22b67c2c2

SHA1
09f4ae10f640af15eba8f989ad6104d2d5b0e464

SHA256
f6c9fd412299f2388fcfe32bef3ab29a2c55234e6f521e768b5707d295f35d0f

SHA512
57d404a918838f827d798cd1973ed2a4ea59a04e5f2c4a54dc8073095c54f3be9869b3a618ff5342a0f62092b94a66b8700d806867510236b2a1b053f717c02c

Download Submit