91d99d8856e3b9868298def0b257c336e21eb36d6a72e42e138c19fb31e1fc52

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
23/08/2024, 07:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bae761ee805f91f0489841eadcc90af5_JaffaCakes118.html
Size

91KB
MD5

bae761ee805f91f0489841eadcc90af5
SHA1

8e66bc0db7e81a0b47af95d8f441d1492c702cb7
SHA256

91d99d8856e3b9868298def0b257c336e21eb36d6a72e42e138c19fb31e1fc52
SHA512

18a250e6121d62e78676b73bc1708a3d30682fab398dd3896ca6313bd6f84ba84f8e29abeedf6c2c0482ff7b3c7a0a7c7a0c0e9846bfd2b02d169c385d787244
SSDEEP

1536:gQZBCCOd60IxCbTPpNwR3O4X33G7IHVSo7g0G/eWOO+w/Nu0gDhL6KLSjRzmMJFA:gk280IxlPd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
976	msedge.exe
976	msedge.exe
1672	msedge.exe
1672	msedge.exe
1856	identity_helper.exe
1856	identity_helper.exe
696	msedge.exe
696	msedge.exe
696	msedge.exe
696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1672 wrote to memory of 220	1672	msedge.exe	84
PID 1672 wrote to memory of 220	1672	msedge.exe	84
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 2752	1672	msedge.exe	85
PID 1672 wrote to memory of 976	1672	msedge.exe	86
PID 1672 wrote to memory of 976	1672	msedge.exe	86
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87
PID 1672 wrote to memory of 2012	1672	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bae761ee805f91f0489841eadcc90af5_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd790346f8,0x7ffd79034708,0x7ffd79034718
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2840 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2084 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5240 /prefetch:1
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5628 /prefetch:8
  2⤵
  PID:668
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5628 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6080 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4076 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,6953161131556595454,9250121530299830087,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4120 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:696

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:212

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:796

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e4f80e7950cbd3bb11257d2000cb885e

SHA1
10ac643904d539042d8f7aa4a312b13ec2106035

SHA256
1184ee8d32d0edecddd93403fb888fad6b3e2a710d37335c3989cc529bc08124

SHA512
2b92c9807fdcd937e514d4e7e1cc7c2d3e3aa162099b7289ceac2feea72d1a4afbadf1c09b3075d470efadf9a9edd63e07ea7e7a98d22243e45b3d53473fa4f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2dc1a9f2f3f8c3cfe51bb29b078166c5

SHA1
eaf3c3dad3c8dc6f18dc3e055b415da78b704402

SHA256
dcb76fa365c2d9ee213b224a91cdd806d30b1e8652d72a22f2371124fa4479fa

SHA512
682061d9cc86a6e5d99d022da776fb554350fc95efbf29cd84c1db4e2b7161b76cd1de48335bcc3a25633079fb0bd412e4f4795ed6291c65e9bc28d95330bb25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
212KB

MD5
2257803a7e34c3abd90ec6d41fd76a5a

SHA1
f7a32e6635d8513f74bd225f55d867ea56ae4803

SHA256
af23860fb3a448f2cc6107680078402555a345eb45bc5efb750f541fe5d7c174

SHA512
e9f4dc90d0829885f08879e868aa62041150b500f62682fc108da258eee26ad9509dcbf6e8a55f2d0bdba7aa9118dd149a70a7d851820d4ea683db7808c48540

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
521a25ea73741f8871741a5cf1eade17

SHA1
ab2965ce99bb5feca66818b5a7a14e2bad597cf9

SHA256
76b10c2d9b8d1d0dcbcdda9465612b9d19db007889f85bbaa3f34fb19c4962ea

SHA512
fac3ee87eea8c19b853f3096927b064978e51f4eb4e0b59b61608ce54090bcb66397c5549c52a85977c829e20a6cd8a5427556d7baa86102846966a421214423

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
6cce5afc68276709e0a3b7421c5551b6

SHA1
48ce017b1cfb855cf3ea860ce8a0807acd8f9122

SHA256
8d72b6ed1eedbbdbaea71a969c05c0fa39e89461fbd94f32bfbc360d6e5d6f66

SHA512
f172e7e8efd371534aa29c2e2059bfee4cac470331cc0ccda9730a99c8c634032d968be80df459cbb34914985ff9e80fb5006eb596fe4c7009b5574733a9f3a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
5c9b158650404a003c0432cd18015d10

SHA1
2ffa430f74f25f797c33236e94d16c96c3118dd3

SHA256
d0226687e7ae918e37e88982895eefc2a12ac0fd222a3e08e9172ebd3e31c5c3

SHA512
09792372fc5b160d6d5c5ec4b5f32261628e574c5327db95864188c4a4fa18d4ccd78a8af668f2d2617985d4268c5b67f716623893c8e99dd658a13063474240

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7d1455ec1279dc7b2b20c98a8bb69df9

SHA1
eda55923226526cd0bd76f2a8936bdd096670fa1

SHA256
3569bdf6b995a8603b2dfa58b88d019c534d987c724fccfeb1d0b5ecf63e7264

SHA512
9fcd3abe59d8bfdf71b1690e986dd8e45948f1624323afec7599208940c483101afea3655cbd2d03b18fe4fd8f7a15903b2bc621f0694b64de988a892286faa0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
024376412bc56cb7a9cca79e124fc2dd

SHA1
cdbf7d1b89e5094844954c8f0a03344edb0ec4f2

SHA256
965072c58bb137edbd27990f7536c48c58f14039607a25e4301253e9bd8fc749

SHA512
c0f5de7eaa9cd78650dc560c47364a8f47b6f6adc02683aa011bc2916fafa8a963e8174710f970187c3d83669c0214b312e1ec372c7cf0962022b216cc243319

Download Submit