c9ab05ffd193d236231456d7314d97f4141f2d244351ca6df952b59c2b770023

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25/08/2024, 03:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bfec45784474ecfbe753d927e6c6199e_JaffaCakes118.html
Size

61KB
MD5

bfec45784474ecfbe753d927e6c6199e
SHA1

0b052893feb7c642592caf8cf3fb2fd541e22b28
SHA256

c9ab05ffd193d236231456d7314d97f4141f2d244351ca6df952b59c2b770023
SHA512

3ddd3b3dcdf940ee6abbcb96bf8335ac6f9abea0166e5cb943f733f44c625a07ec991b671d8f0a7e53952d56882c936eaabe0286c1fb68cd0141b5eaf833d728
SSDEEP

1536:BwjQb85T/rsuQlyQnvSySlquj4kwxhD7KkmnlRRL:A/guKyQnvSyRD7/mnlRRL

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
3240	msedge.exe
3240	msedge.exe
4000	identity_helper.exe
4000	identity_helper.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3240 wrote to memory of 3128	3240	msedge.exe	84
PID 3240 wrote to memory of 3128	3240	msedge.exe	84
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 1268	3240	msedge.exe	87
PID 3240 wrote to memory of 4448	3240	msedge.exe	88
PID 3240 wrote to memory of 4448	3240	msedge.exe	88
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89
PID 3240 wrote to memory of 5016	3240	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bfec45784474ecfbe753d927e6c6199e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffba3ef46f8,0x7ffba3ef4708,0x7ffba3ef4718
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4064 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2244,14341985253341461445,16401314080323522506,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4780 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1620

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2620

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:220

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
53bc70ecb115bdbabe67620c416fe9b3

SHA1
af66ec51a13a59639eaf54d62ff3b4f092bb2fc1

SHA256
b36cad5c1f7bc7d07c7eaa2f3cad2959ddb5447d4d3adcb46eb6a99808e22771

SHA512
cad44933b94e17908c0eb8ac5feeb53d03a7720d97e7ccc8724a1ed3021a5bece09e1f9f3cec56ce0739176ebbbeb20729e650f8bca04e5060c986b75d8e4921

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e765f3d75e6b0e4a7119c8b14d47d8da

SHA1
cc9f7c7826c2e1a129e7d98884926076c3714fc0

SHA256
986443556d3878258b710d9d9efbf4f25f0d764c3f83dc54217f2b12a6eccd89

SHA512
a1872a849f27da78ebe9adb9beb260cb49ed5f4ca2d403f23379112bdfcd2482446a6708188100496e45db1517cdb43aba8bb93a75e605713c3f97cd716b1079

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
2960f37ed2f5c346116e52a97793797b

SHA1
8d0304ac6fd5e8a3c469efb36c24b0ccab084878

SHA256
f10d6d889b86c383cbb02579173716f45574f31c14b1d888e374413eedc308b0

SHA512
9f64ec74f2928b11a517ce3e08ec3ea39f73b37574b81420ae8cd35e71a738528f4d32edbc9f8beb42a91089e4673bb3ac38c14ad71749d2345e73238417da23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
fe9d4440d34f5417cdcc3651a99adbe3

SHA1
e70a659929c205eb83b9b062d0272e4e5724668c

SHA256
c76c584cd789d684a0826cbae6d22f56f25a69b31a9432f6cfd2ff7ed0d661eb

SHA512
1ed6cd7f95ddec3870e3ed9a2d1b9be398f4690f10038f827a19875ef0a2e59028568ebb39fe4cdb68747feb0db51fe37f827d3d36f424a7a76f26079daf4bed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b1895739cda408ffe93d9ed6d42e20c8

SHA1
c2d17a835ab280133b03637ff293515a47bc53c8

SHA256
40fac8f9e66709ed47601a54680ec94f5817df34826b5e9d76e8aea78be1d472

SHA512
1e594454dd3aa61a7d683fb0b0945070e2800f979864ccefc86dda5ae94bf05ba68e7e862535b7a820f35d137f897c3d66db315ba4f76cdf557059faa8a10319

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d7b4811b-2098-4be3-bea2-68f347fe729b.tmp

Filesize
5KB

MD5
81954130276506d00f18a2ea286f48db

SHA1
5d7bc564034c82f375aec70b2b62501e00fc9469

SHA256
62edbbb019a6d1d7ed159535a2d0f072a2409c5647386afd13b96a4286325c25

SHA512
fc88eebb543b8439a808053142beb8d74f0f1d3da46f0d4ab1ed9729521653054c70f7d9ab103bee61c69a353ba8d4e3f73e185203fcc94e5079c65091967d96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
05f1018b25004db18112df50f58cb01d

SHA1
9667f66ad205f17ecd27424a5aeb13959f96203f

SHA256
72625e8dcf02cae6517cfefd7bb3763c079f005bcb36b6711a326af1b01d98cf

SHA512
e3db2f01f5ad1e1409fe758f5e2d83a3161b63bfc8cf30c51e648c6a20265bd2d8cd946ee2a9031266778265330de1305de9f9fb9f79c4c61b6ee88edfcd6527

Download Submit