ca66da56d075ac8ba9a12f833848d921040f338d0637eac4a437a53c857b6937

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
12/09/2024, 09:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dc276001910cd20de603479c5b4d7a19_JaffaCakes118.html
Size

57KB
MD5

dc276001910cd20de603479c5b4d7a19
SHA1

f004041cfbecc9180dcb0d41dfcf7bdf5c5ab550
SHA256

ca66da56d075ac8ba9a12f833848d921040f338d0637eac4a437a53c857b6937
SHA512

63b4edf13baf10a425e7a0ce9a797dbdb6cee104203e64c3b7b4a9f34fac7f00351c39fae8a47c507638fc0fada382e054b7fbe56f7be592c5b277e806c27e4f
SSDEEP

1536:ijEQvK8OPHdsgNo2vgyHJv0owbd6zKD6CDK2RVrojjwpDK2RVy:ijnOPHdsp2vgyHJutDK2RVrojjwpDK2m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
1752	msedge.exe
1752	msedge.exe
1824	identity_helper.exe
1824	identity_helper.exe
1012	msedge.exe
1012	msedge.exe
1012	msedge.exe
1012	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1752 wrote to memory of 2464	1752	msedge.exe	83
PID 1752 wrote to memory of 2464	1752	msedge.exe	83
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 1364	1752	msedge.exe	84
PID 1752 wrote to memory of 4252	1752	msedge.exe	85
PID 1752 wrote to memory of 4252	1752	msedge.exe	85
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86
PID 1752 wrote to memory of 2040	1752	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\dc276001910cd20de603479c5b4d7a19_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe7fdc46f8,0x7ffe7fdc4708,0x7ffe7fdc4718
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2712 /prefetch:8
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6348 /prefetch:1
  2⤵
  PID:5224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6408 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2024,1533518598495552733,5736779086847662610,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3064 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1012

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2360

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3924

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
816B

MD5
3d7400cd510cefd7f1a6762758bb19e4

SHA1
a245a63194a8f82e1a9497bf14cd446c44247d04

SHA256
b4358dadff2ddebfd7af00f1952c512ca80cc6b77bd12760e27a6c165f5fd255

SHA512
4db0057b13dd3d643a03367aec3ad331612d65a3bf44f9c851c3bc5b90e0bd5c8b729201aa589852fb425d0ecb61127c14f63756bc81c389a7ef3f5afc2eb143

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c3a5dccf856f0c8603561a4f5b6b628e

SHA1
f81d9374ddc18327776d0534cb72e80ec4e53b78

SHA256
668d9bf2b4db2be5c444333889ae40a558c23b97240d9c78203b25dfaa7fe566

SHA512
3bbc3964ebf569eefebc9d106a29bf251d298d8ee25f17bf0a410096283477d5d95c09fe4f779bdbf30191cf12b472750e232a73dcbef856a67b6cb082081949

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
ca60ceae7450e45336daed937ccf7d70

SHA1
72451f85c25884d22d90ec9656d42958f2c43305

SHA256
acbfc877d6bcb61e92c0a8bca7dd1e5621f5ecc4d9175876c9056bdf3656f870

SHA512
62bc090c8c2f69a82aff9e575931279a2a84163e6017f16cab3254b4ac445d7a5cfbbdac81a03e338e5a9f17b115f0eb3be03227ad591f4c0a10c37a0634fd73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6ec5374a1d051c6cf36e39346001d623

SHA1
0acf34621d9ae8d194e20e0507e476c5188a85ec

SHA256
4264a25f04d4f60ae14254c6abf50741b77db3cea5ecdbbbbcc22f7b90cfcd9d

SHA512
c316374ca5f91aeb7d5d4aebf2b5783d0fab82935d1356384e5289491e9acd454ef1d281e0933777e5c5957646def7e60612b7ff01f5d841a04e775b42f2de27

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
37da678b4b330a36afbf39940fbc3b5d

SHA1
d8053685446cef2bba2434c7c907db977c7f68cd

SHA256
1e849e9bf2a3b0d82961ad87d8bc8edd9fa9209975bc7aacd126214e165299ff

SHA512
ac93f672cd308e0c88d8653ce85b273144dc670501a96676af9cf2e40a8f89e99273ef57d652e07a8d0f96d382c2bf30491b8e7005cb7149ab003dd9cdd5747e

Download Submit