8823214d48efc3fece52f758e753d6f3e331d497a8c2f7b986adc263556173a1

Analysis

max time kernel
100s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
27/09/2024, 06:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f9e0ab7ad02616655de3d34796ad9e3b_JaffaCakes118.html
Size

32KB
MD5

f9e0ab7ad02616655de3d34796ad9e3b
SHA1

83304605676749c6cf98004b5c1244d9f257e299
SHA256

8823214d48efc3fece52f758e753d6f3e331d497a8c2f7b986adc263556173a1
SHA512

f3fe0d93ff8c16ff3e47dcc93322f49676ca41454907ecf72525b958e5a337dd2cddf0722eda52848927ce7e0a06055c8d71e0ff1db7e8432b7a3ad5b28a9276
SSDEEP

768:0McI69NpP2mgKK20Pu/VaLczyj4GK+yzT9yXovaZejbrFM30LPNAI:0MKNpP2mgKK2YUVaLczyj4GmzT9y4vaO

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2076	msedge.exe
2076	msedge.exe
3472	msedge.exe
3472	msedge.exe
2956	identity_helper.exe
2956	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3472 wrote to memory of 2376	3472	msedge.exe	82
PID 3472 wrote to memory of 2376	3472	msedge.exe	82
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 4896	3472	msedge.exe	83
PID 3472 wrote to memory of 2076	3472	msedge.exe	84
PID 3472 wrote to memory of 2076	3472	msedge.exe	84
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85
PID 3472 wrote to memory of 1424	3472	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\f9e0ab7ad02616655de3d34796ad9e3b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcd95346f8,0x7ffcd9534708,0x7ffcd9534718
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,16872880217874791884,12164800290963171772,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2188,16872880217874791884,12164800290963171772,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2188,16872880217874791884,12164800290963171772,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2812 /prefetch:8
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,16872880217874791884,12164800290963171772,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,16872880217874791884,12164800290963171772,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,16872880217874791884,12164800290963171772,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,16872880217874791884,12164800290963171772,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,16872880217874791884,12164800290963171772,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5176 /prefetch:1
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,16872880217874791884,12164800290963171772,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5192 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,16872880217874791884,12164800290963171772,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,16872880217874791884,12164800290963171772,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,16872880217874791884,12164800290963171772,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3132 /prefetch:1
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,16872880217874791884,12164800290963171772,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:4548

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2960

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2060

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7114a6cd851f9bf56cf771c37d664a2

SHA1
769c5d04fd83e583f15ab1ef659de8f883ecab8a

SHA256
d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e

SHA512
33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
719923124ee00fb57378e0ebcbe894f7

SHA1
cc356a7d27b8b27dc33f21bd4990f286ee13a9f9

SHA256
aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808

SHA512
a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
326B

MD5
9f1d661661d9ef3a423745faa90fa0dc

SHA1
f4edce9739c10860c273770cf8cf7359b551d1c9

SHA256
8df0808e2691ef04faedc6162539984d8801a70190ca92426e02b2f4971fc705

SHA512
85daa3ed0736ecf447bebb8ec8cfddf3d901b9982d0386cf148dc45ac1ff838261dfe841c90adcb824e87f9e1e348b58a24fb07d81e42edb3a35bafe9afdecb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
403B

MD5
794f1f100dbe1b348b71f6697c84b353

SHA1
161432f20c6972831dc149fca0dc54ea7d4a5c8e

SHA256
dddfae0806d0bd59b552a7e1924cb7cbf10db621f2a60fe4b5ce6404a18de5da

SHA512
3a9ac1085c0c973036f1e0415c96168daed1850bf8b3b414495a506ffebcfcc31e9690ce2d6c8f9d9219f8705cb583a3f394fba555e2f62a24f43ba92468d36c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c11c0022796204848f74b1766c0c6eb2

SHA1
a9f1c4c4f4fec45b68cc648aba32fd477b4fd119

SHA256
0008391f1cfd36a5805f8b3aeb016241272f8a3ec4d62c007a7d7459901a03f4

SHA512
2f074470508b7adad4c9f844d6846d64130450f9abe41266d9ea5b81b8ca65d3d6aaa74707242787d7e31d514fdb6ea53f6dde46113fbfb0ce31506c46bb278c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4eda77e959612644a4229bdee913f9c0

SHA1
846fe7ece7e7fe4108e0a6e8f80732b5f6eca87b

SHA256
47ef2aa37c86e3e3a1c140ab7900f63400c75f4f79e2c113dbb7367907e69428

SHA512
fd0bf83332960a5f64ae67ccef9acb25c7fcc2e42bce792faaf2ade12e7b0bcaee74880814a3ab28066b7f14bffc909366178d955213efb4e4a90d087ad048d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a8e6ae1fe201e3e6de9ee955383ed3e5

SHA1
b05c776fbf7785662a4d7fef05303a4ec9390465

SHA256
8b1dfb576cbc37d46ac03668e4406cef469872c13485eea789780c3daa630b45

SHA512
5e84924201efce87c7114e543f4972dbb7556d1857058c9025245764cac3251ea0e56e0179580352720e7edd16f2f3b2670ce64d1c76a249173b76300544dbf4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6f6e7f1162a170c072613d1faad405a0

SHA1
f5295d8ae9a18c4c90bd3b5416e5482bf349ebfc

SHA256
b2aaa14838bf12d3008d917580cee4c0cacbefefc59fa4871cc92f8a7455ab5c

SHA512
ebc17ba6ff1c6e548991af0ba72d012aa049831381fb82bf7707f6bd0588004374f6e1536d029bfced85a3707ca6cdb6dcd5c5784e6397043b4d6c5eb7cc64c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e18ea3851be438db25766595f44418ec

SHA1
07d3c4b33afbd9a5d102b846618668cc91eb32e7

SHA256
1b83117ac78c36064d15d9cf482490ef36d2d6b46e9bdcc91bc9060af3a18f0f

SHA512
ad571019b8647fcbac79e937c18b732e51f9ac643b75b49448e95ec33ed8204f191e213a1a3ccb6068871fab1d1e21460f02cb08baa71ee72aacf44bbf1222b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
31ff6cfcd8d1e416df6153ba69b19f2d

SHA1
770c9f7dddcaf00c1f7d6348da4600acba38f94c

SHA256
f1f330e11b95bbdf65325706f051c5296e2a76395851064d73db15fef49c2eff

SHA512
d793a999d97268b71ffcdfcf25c186d1856eda65dfc094bd66cf329f2e6f68bdba60ed94d2c3e6ab96c0797fdcfeaf00dcbce2f98e65656ab2433a811b9f33dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
1692f6f7cf5a9139cff3b003a49de7f4

SHA1
5bfdf76f598dbc4b0615e20546bc25fa1f4d9c95

SHA256
d3c7e2a3331c8a404bea0152fc22f797cc56fd127faadabb90c971bb363e7504

SHA512
c7804c2248986db414863c40ca0ebb74c0684c84e6a14dc338e5625328257a0ff9c8027f234c4f12bef430a246322fa36f3cbf5c38cde0ff4d08cfe60c26414c

Download Submit