9631415347cc3a25553ee329c843d69e6e38e506f6b36aa1b1f3aadac8017312

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
22-08-2024 17:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b870d08000a1f15044e143752a581a41_JaffaCakes118.html
Size

21KB
MD5

b870d08000a1f15044e143752a581a41
SHA1

ff37ac5cd01067161cb95f9789c5066403e2be44
SHA256

9631415347cc3a25553ee329c843d69e6e38e506f6b36aa1b1f3aadac8017312
SHA512

d042d8187de8e304ba0dc09f7a025a89e0761260ce92710281fc97793d9b150640a082512126a689892948ab86055f37bfd80f8c677097fd6c9d0a00dd78e34f
SSDEEP

384:4+QfPFd9QZBC7mOdMMy+KfpC5IgSnbmFe7AcGP6dY8E1jYsPd:Zcd9QZBC7mOdMMEpC5I9nC4c6sPd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4744	msedge.exe
4744	msedge.exe
4636	identity_helper.exe
4636	identity_helper.exe
5640	msedge.exe
5640	msedge.exe
5640	msedge.exe
5640	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4744 wrote to memory of 1132	4744	msedge.exe	84
PID 4744 wrote to memory of 1132	4744	msedge.exe	84
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 2044	4744	msedge.exe	85
PID 4744 wrote to memory of 4184	4744	msedge.exe	86
PID 4744 wrote to memory of 4184	4744	msedge.exe	86
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87
PID 4744 wrote to memory of 4028	4744	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b870d08000a1f15044e143752a581a41_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd171146f8,0x7ffd17114708,0x7ffd17114718
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4516 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4128 /prefetch:1
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,14450155669693419721,11053123659040177874,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3156 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5640

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2248

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1480

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f9664c896e19205022c094d725f820b6

SHA1
f8f1baf648df755ba64b412d512446baf88c0184

SHA256
7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e

SHA512
3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
847d47008dbea51cb1732d54861ba9c9

SHA1
f2099242027dccb88d6f05760b57f7c89d926c0d

SHA256
10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1

SHA512
bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
212KB

MD5
2257803a7e34c3abd90ec6d41fd76a5a

SHA1
f7a32e6635d8513f74bd225f55d867ea56ae4803

SHA256
af23860fb3a448f2cc6107680078402555a345eb45bc5efb750f541fe5d7c174

SHA512
e9f4dc90d0829885f08879e868aa62041150b500f62682fc108da258eee26ad9509dcbf6e8a55f2d0bdba7aa9118dd149a70a7d851820d4ea683db7808c48540

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
8451edc00f55fd1c1ba9851043cea54a

SHA1
c761f7de4e2e2388acc6aef4f9b27f8db00b1869

SHA256
b9c67ab1c2efdf686ee18c2cb62851fea96cde88a4a554fe987314efd34bdc20

SHA512
0d7c937280ddf3fcc02a9383bf9f6596c25adeb12a8289fed7412c1feefc92a556efbb241bf7d226e92b208176892547499e5e1ee3b13f5b2024e5a2b0e1bd30

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
e4274439e82134c6115c1fd99c73f2f0

SHA1
e5e6015e0720fdc0ce9e913ecd08ab1bbd0b5a47

SHA256
f9b71aa0c70d3e0a054814e2c69dd5009fd1f8f499becd91565254e171ae79a2

SHA512
f4c9f64989e77906f20750f8252a1cb0117e3d6b2a11000db4ddaa835c18926d106e5d4b399a41bdb919469df08a571f1e17181608e969fe788fad7b6cc72168

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
712d36fe84f95b66406e118acb8d2385

SHA1
cb173da9a576adebcf95905abbe20e3debec05a1

SHA256
3323fa0eff6b29e9755b60efe561e79408829cb783a77769beb78283e4d81222

SHA512
c7bcbb44382e7a8ebc548f146d72c5247aef41a5994e59f1a765ed62bd5b4091b173f93fe289e3806a01fbedc2cbe4bb99ace31665f4ec0fd0e545564c0431c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
25f8c00a838bd50f9f3e8721c4724ced

SHA1
5338fef8750859c419b39d9f3d814c400521a4c4

SHA256
b033b35b0f5ab37515ea963410d9651dbf9100a82ee52eb048ca09651d4967f7

SHA512
932384f3e3214ed1de3fd1344a55ad99b6d3af977006124f96078831ad20beffb22b4f8cbc0ddafc036f336a41c87c3e424fe18c8f5e0b9e540000823ffdf503

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
245129cc9a4e1dbaed6e74bdfebfb6f3

SHA1
e6b2b5cf8b568b4373346cf42c2a0e51876fc54c

SHA256
db8d658a6c28af75a2f97593e83f511aa1a0b723bfcd182800592d81861cd644

SHA512
7a807ccd6b7163f85cc95e8c2703af3ade2890902e7fbcd9715dcc114bdbea18f87f6c0606e9ba00fccf0abcafddbfd0e17eb43f0411894c1b59fd289a93390c

Download Submit