5ae15061c8eaeaf710d12ae040d9de5b66a3848f744d435706c8ccd3a6929464

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
25/07/2024, 20:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

710b4ebb9d3bbd28002a8bb49677f89c_JaffaCakes118.html
Size

57KB
MD5

710b4ebb9d3bbd28002a8bb49677f89c
SHA1

3ae25554a81f0910d438aeb6a5cfb7cfad88d8c7
SHA256

5ae15061c8eaeaf710d12ae040d9de5b66a3848f744d435706c8ccd3a6929464
SHA512

cf5ed65d94908a86b32dbb8924270d1647ba8d093cc7bb2592f66f0c2b5481b7cc9fe75c55f4f2b71c0fb6635998c8056da064d300d880e10d41c652e3f02ef2
SSDEEP

1536:ijEQvK8OPHdygco2vgyHJv0owbd6zKD6CDK2RVropYwpDK2RVy:ijnOPHdye2vgyHJutDK2RVropYwpDK2m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2476	msedge.exe
2476	msedge.exe
1604	msedge.exe
1604	msedge.exe
3468	identity_helper.exe
3468	identity_helper.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe
1604	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1604 wrote to memory of 4884	1604	msedge.exe	84
PID 1604 wrote to memory of 4884	1604	msedge.exe	84
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 1144	1604	msedge.exe	85
PID 1604 wrote to memory of 2476	1604	msedge.exe	86
PID 1604 wrote to memory of 2476	1604	msedge.exe	86
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87
PID 1604 wrote to memory of 3556	1604	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\710b4ebb9d3bbd28002a8bb49677f89c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff93ab46f8,0x7fff93ab4708,0x7fff93ab4718
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3416 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6192 /prefetch:1
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,869466296025816843,7715735265307896502,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6140

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4476

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1020

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c00b0d6e0f836dfa596c6df9d3b2f8f2

SHA1
69ad27d9b4502630728f98917f67307e9dd12a30

SHA256
578481cd359c669455e24983b13723c25584f58925b47283cb580019ef3142b1

SHA512
0e098ab5f5772fec17880e228a0dccbbaa06dc1af14e0fd827f361599c61899fe07d612a7f7b049ff6661d27fdc495566dd20fc28ceed022b87c212bf00be5da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
54f1b76300ce15e44e5cc1a3947f5ca9

SHA1
c978bfaa6ec6dae05464c6426eaa6cb3c3e2f3b7

SHA256
43dec5d87b7ee892a3d99cb61f772ba403882ac0772423f36034e84244c1ca24

SHA512
ac26e5676c675be329eb62b5d5a36a0e6014ab8a6366684b0fc2a59ae5f061f596f462b82eb4e9f135d2235a0cbd4af96680d234eecc873a8397fd81507d277a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
792B

MD5
f0673cd6e266e74c129be4b30e69f3d7

SHA1
9e42d4ff05c4f0d3cbc5520785089b12d5eefbad

SHA256
9c3cb03a76004315caf1874690350016e0d50721ca6a0c5d789e1610a4280007

SHA512
55e5fb79da80493d000e1dc0576e9422df3a331aaeeed0518cf0d6d5487c7ea7e1b9492d70a2dfff5e97332a1d6e659db71a3db91487d1046ba6bedcc058b2e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
7aa049dc7d084f1a810e89526e31effa

SHA1
ca8c70ffdb890968d7b67cd7ed188accb29abea2

SHA256
f22061a8f8633d784dace16c7c1e5fb0096b180a58f38619d9bfc9e76fa7db2c

SHA512
18e619475ff056f5885867fb39aa36186674761642aa2bb6284d8c1795aec320927f26cdc026d5f2d48f71f27394c1c3bd7dc103dd49cdd2d9688fba4970ea76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
d395be3bd67dd2efa2268d98f7378e61

SHA1
31f32ab76dd49e3b1afc4febe394a949f6f0e261

SHA256
fa4794a59dc899aed559b09e3177b7889f128d644bd01071fbb465659887714c

SHA512
6b1eb13230ed308738d424d4b1ffb8e42c82e6efcf28265dc2e60dfbb0151d1382ad72d890f9aa8a839f267cf6ae20f13098fc1aca0076d3869ede205f2c6d9d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f4b53d570d096ecf40bf1a46d0c77037

SHA1
4727e57fca297ee5e52060bbb551b60ecbd2b54e

SHA256
035b01660e2edc6d21837d4e314128dd7c55851950af438ef10bb5c82af9a394

SHA512
937a2c7b333ba5527631469e0af851956756a2a09d4f33dc6ccae7578abc58240adea09679b7b3aa768f37b2c8f25a74cc8aa4d428a01ba1d82f6aa3a2f55911

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
b7a5c5ab476f92acd96f463893ae0ab7

SHA1
aec10a4b83ee7bb644abb1a44b07e410ea593237

SHA256
01a096bd231d58e15b730179287b5c46136f3ded3016a25dc7467083a279ad5f

SHA512
684edb6d01184e3c270864ebd92f8b9a25298d913c48ef91264ac3e2fd07b3f2cd9f8a3af0cc8e6b47ec3899f5326e077874cb1ab799dc2ff45e030755c1501c

Download Submit