b879f705f45984fc77ede0583b8a9572ab1948e803f8817f86d5fa5b0126a82d

Analysis

max time kernel
145s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09/10/2024, 02:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

29710a28998c0c7edea0e625d64f7533_JaffaCakes118.html
Size

56KB
MD5

29710a28998c0c7edea0e625d64f7533
SHA1

9db1ef0de31ebfd8537a37218f5436c9db981bb6
SHA256

b879f705f45984fc77ede0583b8a9572ab1948e803f8817f86d5fa5b0126a82d
SHA512

2947739af23e26933fca7b335379f51f6de0e9c4041cd2cebdc85277b09ef5b7107b8f41f78a8fd467076870a833d7945c0e1a4144f4e24c5eaeded1f8cff962
SSDEEP

768:Zcd9QZBC7mOdMkHpC5I9nC4L0obKVi/HUK3Pd:gQZBCCOd30IxCg1x/n3Pd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5064	msedge.exe
5064	msedge.exe
4868	msedge.exe
4868	msedge.exe
4856	identity_helper.exe
4856	identity_helper.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4868 wrote to memory of 4836	4868	msedge.exe	83
PID 4868 wrote to memory of 4836	4868	msedge.exe	83
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 4720	4868	msedge.exe	84
PID 4868 wrote to memory of 5064	4868	msedge.exe	85
PID 4868 wrote to memory of 5064	4868	msedge.exe	85
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86
PID 4868 wrote to memory of 672	4868	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\29710a28998c0c7edea0e625d64f7533_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa202f46f8,0x7ffa202f4708,0x7ffa202f4718
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2216 /prefetch:1
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4932 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6304 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6304 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6472 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6300 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,7059352962220089383,15484297876499252153,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3080 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4900

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2504

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5096

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56a4f78e21616a6e19da57228569489b

SHA1
21bfabbfc294d5f2aa1da825c5590d760483bc76

SHA256
d036661e765ee8fd18978a2b5501e8df6b220e4bca531d9860407555294c96fb

SHA512
c2c3cd1152bb486028fe75ab3ce0d0bc9d64c4ca7eb8860ddd934b2f6e0140d2c913af4fa082b88e92a6a6d20fd483a1cb9813209f371a0f56374bc97d7f863b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e443ee4336fcf13c698b8ab5f3c173d0

SHA1
9bf70b16f03820cbe3158e1f1396b07b8ac9d75a

SHA256
79e277da2074f9467e0518f0f26ca2ba74914bee82553f935a0ccf64a0119e8b

SHA512
cbf6f6aa0ea69b47f51592296da2b7be1180e7b483c61b4d17ba9ee1a2d3345cbe0987b96f4e25de1438b553db358f330aad8a26e8522601f055c3d5a8313cdd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
213KB

MD5
f942900ff0a10f251d338c612c456948

SHA1
4a283d3c8f3dc491e43c430d97c3489ee7a3d320

SHA256
38b76a54655aff71271a9ad376ac17f20187abd581bf5aced69ccde0fe6e2fd6

SHA512
9b393ce73598ed1997d28ceeddb23491a4d986c337984878ebb0ae06019e30ea77448d375d3d6563c774856d6bc98ee3ca0e0ba88ea5769a451a5e814f6ddb41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
c213ebab118c00005323860733c0aadc

SHA1
628d6e80280100960811b69b9d2c2445d7a08864

SHA256
55f93b3bb41b1f2385590823049433de729fb9441a6f072556fa35b09e83af30

SHA512
1e3f5567dd08e0e2597094a03c6a22178bfaf1d2d440df652303189fa348e3c4bcebb92167e7951d7f4fe27b0e145374750abea319d7fa6049277061e3c75c20

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c3b6a45d18cfaa44a82d421d22fdb17c

SHA1
dbdca6920c9f8ea5b86dadc6f3ce7e27a47cd113

SHA256
0708aff83b5b1fd2e58cf7cc64507a027a836df8d125f99d25f137611b6818ed

SHA512
a904654843cffa184f194ee4b54b3e7eddf9bab9759df82ef45ee62f5080a4228cc1f9888ba6f3a531ab278df1f89adc82bc8bb4b12da543b15bd69abf1b3851

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
636a78ec67dc2ffa4664e36073a4ee84

SHA1
af63d3d59e84a719aeede0e724a2753b75ebf2c0

SHA256
ee3a10dc114a345bfafe7d6f99699cd65320b7d5805c78dcf443e5563b4987de

SHA512
39c3de095b71aa0f507335d3f1d6ebbbbc52bbf19891a2843cc656d922277a822494d85962f6c85179661018bead1fb390cd5aa59409f193aa54a9a6eba245c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a96ee830e19d9224105ebe0a88887e70

SHA1
30e272033facf9de3718afdbe57174256b0facc7

SHA256
27f416c39781213b118994451383b94e87bb3fc5fef5066bb59a0d4bac491dfb

SHA512
9f3be3fd5c8ffd82a1d9ac11679cea02700e586ead215be4595af7c845ccf0e84f171d42e30f699da7c1cd0f534440f239e4bc5c02ba477ee10cfe6512eb1070

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
752b174124c3b72810e43a2cffc1c75d

SHA1
0dfc5dd61c59187f7da163d96fe9ce8d147f8017

SHA256
aa4001a8da8cfab8d1b53f68100b943a246c82989a8a2f072bbd0158272c8e5c

SHA512
ce4b70d7f715e5e9acfbaa9f875c2cc05a5438997bebdda47d476ee31d73b9176345b56c807c560f7e8457e4738501eba99a14981298cc016d40bafb134fc89e

Download Submit