2f299a23a68a985061d6f8f0605e3e60c1bf9158e6684d37e0fd91d18a7b8f6b

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
27/07/2024, 17:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

78e7cc46d19189f58f185b6a25962a29_JaffaCakes118.html
Size

19KB
MD5

78e7cc46d19189f58f185b6a25962a29
SHA1

27a3ee1c325e56f079c047eb614539aa2dd6eae5
SHA256

2f299a23a68a985061d6f8f0605e3e60c1bf9158e6684d37e0fd91d18a7b8f6b
SHA512

3212f92e293cd95126f2d6ca953223f9e6fdfea49a1fdb661e692552939d7a25bfab9c99458098331e12dd20b0d81b94ce7be7a6d6c70c32be10e77d171f6c50
SSDEEP

384:4+QfPFd9QZBC7mOdMAItKfpC5IgSnbmFe7Ac5I6MdLDPd:Zcd9QZBC7mOdMAxpC5I9nC4SPd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3104	msedge.exe
3104	msedge.exe
4000	msedge.exe
4000	msedge.exe
3640	identity_helper.exe
3640	identity_helper.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4000 wrote to memory of 748	4000	msedge.exe	84
PID 4000 wrote to memory of 748	4000	msedge.exe	84
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3592	4000	msedge.exe	85
PID 4000 wrote to memory of 3104	4000	msedge.exe	86
PID 4000 wrote to memory of 3104	4000	msedge.exe	86
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87
PID 4000 wrote to memory of 224	4000	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\78e7cc46d19189f58f185b6a25962a29_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa564746f8,0x7ffa56474708,0x7ffa56474718
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2332 /prefetch:2
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4056 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5516 /prefetch:1
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2304,757078647181411107,17579269552362131948,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1400 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1644

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4204

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4716

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
bafce9e4c53a0cb85310891b6b21791b

SHA1
5d70027cc137a7cbb38f5801b15fd97b05e89ee2

SHA256
71fb546b5d2210a56e90b448ee10120cd92c518c8f79fb960f01b918f89f2b00

SHA512
c0e4d3eccc0135ac92051539a18f64b8b8628cfe74e5b019d4f8e1dcbb51a9b49c486a1523885fe6be53da7118c013852e753c26a5490538c1e721fd0188836c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a499254d6b5d91f97eb7a86e5f8ca573

SHA1
03dbfebfec8c94a9c06f9b0cd81ebe0a2b8be3d1

SHA256
fb87b758c2b98989df851380293ff6786cb9a5cf2b3a384cec70d9f3eb064499

SHA512
d7adcc76d0470bcd68d7644de3c8d2b6d61df8485979a4752ceea3df4d85bd1c290f72b3d8d5c8d639d5a10afa48d80e457f76b44dd8107ac97eb80fd98c7b0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
210KB

MD5
5ac828ee8e3812a5b225161caf6c61da

SHA1
86e65f22356c55c21147ce97903f5dbdf363649f

SHA256
b70465f707e42b41529b4e6d592f136d9eb307c39d040d147ad3c42842b723e7

SHA512
87472912277ae0201c2a41edc228720809b8a94599c54b06a9c509ff3b4a616fcdd10484b679fa0d436e472a8fc062f4b9cf7f4fa274dde6d10f77d378c06aa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
c3ecdd256e348477ea0cc08fdc01c502

SHA1
bf8d72aeee73f07765aada3e24d253aaf377c103

SHA256
7a85e940f0e62eaf472e8033f81af480867e73e2cf9096fd92b9799789cefd3d

SHA512
da73181084ccc5a435113e1bf9f3ccf84a181af2915c7226c8b07c5bbf662818e0fed715ccd7ac5583ca40b570eba74adbe7cadabb1c437d8eb45270c94558e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c03c1da33c98f39c10e0417cf71e2c83

SHA1
1c98477941c870bb2174eda01ddb36a5709428d7

SHA256
086f772a995efd9e6884ece2f2260d4c775de908cbacafa783f282e88f47c016

SHA512
b6464735decc9e22f4eba9a5a7a57df527c9759f5a6b6a1c4633eaab387d87f544588b40759338b8ae373192f356eeb2ce8c141a77ff3bf84e039108fa93da1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c50815f28d8e1b25a75ebf66f0878d7b

SHA1
0c81d224671e5f90b055f1979f91c59e78e9bc9c

SHA256
d29a5b24e3ce743b7eb84031e7fdc10c03b0f07ca66f9d5c6b8e7428d4321362

SHA512
8a7e60920597b0c0ab53e6adc26f111d74e638893388b1ad4260a27010dd2a684d8ca7dd42d05496eec0751d2ad1dbd3e873c2f5e19c769b9a522504e246ada3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b6deee49291a6e1b001e71d43a41f573

SHA1
7484044b8ad7390b7046ff45b41098ead54c4609

SHA256
db2692f226dee5b2f85bd83d253620e4f7fd1dbf57fad52b3cb50e4d839877d1

SHA512
015dddb07e752427f7a1c00089ecda4a606e1eca97342a6c6f8c3948db09db6ecfc55f0e2960657b07cf40e7bb1199f24fc5888c2f9826b34f61a6f960979e78

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
2206fe73e6e533327b2a614b36478484

SHA1
1019941955418d0a3ee6519294313dcbb43c478f

SHA256
d9ab7f3822f56f47ae9783f30ccb597b375530219961eb447c67232e0608fedd

SHA512
66c17711882cfdf3acc9db652bed1513dd1c4431584c02d01b63fe4ce94cbd7ebbec8cf7244626f33c9acb82b5ad08090fc913920188ddf8cb3943ad5f448ea2

Download Submit