77a6b4a58ee6384419804115848099f4c99c209ddd015bcc0a70ba0f7ac6102b

Analysis

max time kernel
148s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
15/10/2024, 01:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

450cc8c249f4bd041f0649b863a958f8_JaffaCakes118.html
Size

58KB
MD5

450cc8c249f4bd041f0649b863a958f8
SHA1

80b51b6f0cae49924af0439771510c7bea6552ae
SHA256

77a6b4a58ee6384419804115848099f4c99c209ddd015bcc0a70ba0f7ac6102b
SHA512

edf0af178f608783bcc8618848665393ba87b6813c616051740f206d2776959abc7e79d0aa9296c7f6c29491923d37535f7c1489d49b7f1e3806d4573d578f94
SSDEEP

1536:gQZBCCOdNtk8fi+cFp1VX0NS9kA1WnxVR00IxCAwfpiqNWHIs9bh7gqnUbgIfffD:gk2ntk8fi+cFp1VX0NS9kA1WnxVR00Iy

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2340	msedge.exe
2340	msedge.exe
3404	msedge.exe
3404	msedge.exe
4340	identity_helper.exe
4340	identity_helper.exe
5928	msedge.exe
5928	msedge.exe
5928	msedge.exe
5928	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3404 wrote to memory of 3720	3404	msedge.exe	84
PID 3404 wrote to memory of 3720	3404	msedge.exe	84
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 1288	3404	msedge.exe	85
PID 3404 wrote to memory of 2340	3404	msedge.exe	86
PID 3404 wrote to memory of 2340	3404	msedge.exe	86
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87
PID 3404 wrote to memory of 952	3404	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\450cc8c249f4bd041f0649b863a958f8_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8666a46f8,0x7ff8666a4708,0x7ff8666a4718
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2840 /prefetch:8
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,17525403274818251286,25174526681073909,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5928

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1884

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:960

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fab8d8d865e33fe195732aa7dcb91c30

SHA1
2637e832f38acc70af3e511f5eba80fbd7461f2c

SHA256
1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea

SHA512
39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
36988ca14952e1848e81a959880ea217

SHA1
a0482ef725657760502c2d1a5abe0bb37aebaadb

SHA256
d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6

SHA512
d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
215KB

MD5
1585c4c0ffdb55b2a4fdc0b0f5c317be

SHA1
aac0e0f12332063c75c690458b2cfe5acb800d0a

SHA256
18a1cfc3b339903a71e6a68791cde83fca626a4c1a22be5cb7755c9f2343e2a5

SHA512
7021ed87f0c97edc3a8ff838202fa444841eafcbfa4e00e722b723393a1ac679279aa744e8edde237a05be6060527a0c7e64a36148bd2d1316d5589d78d08e23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
67a574345048cc14f581155630d8017f

SHA1
de95bd054d8b4dc0c26b405fce8c1e98c8da1254

SHA256
be321eef343b55aa4f06294344471d13c5a87592ba67bb2ea0c089aa5715fffc

SHA512
bc67434ebcb8a4f4d9e79a4fb8be7a927ca8386d43e8f6009a4b5bcc93c7f5d9ce752b71842d2f15e912aa086eee0d4d5c7393b60a27427001cf90eef771b5a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
2948a71718c0fea61fe2b3c8d580a6a6

SHA1
3be2dbb2824effc80bf6b454a444d7c727f2616c

SHA256
77c86d09827523452be29e8f45ad9868217d30d637990a80b9ae9386e04d863d

SHA512
4a8e84ce54fb82a2d871c15bfffc82b6d183a5ac9289d3419ae75782a6e19f580c252b7470b85370facefa987570a51840035fcbb775d6147d199dd3493769fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e38085c8782166a464e9bca713ff5c97

SHA1
474f0aaf9499a826ba4cb7341e206f369c2266b0

SHA256
f9124111aeb0f2ce4bb417330eab680a776fc946b1613aa998208491bcb8ac67

SHA512
341a155f9f17fda1c3c7942be9fb2bee6935253f37a5761ae581a1ffc5168a77fda659f6345b6021b9dfff422eac60a2687f8c48b57bac36b06ed3b1e69888e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6679be68e718e6c44d0acd430b8c2869

SHA1
f01ebf9267fd8924d1993f0e0eb81a0e88ff09de

SHA256
2a12355626535e5ac4e1bfd2893de2f727eeba4c272ef0e1d8ebab9048307c91

SHA512
3de963aa54495da23901294da6594c01be7d906cc0d0e7d56edea6255b4d3fa509b33fd4aa3c79b3c8eb2c462a30c18c4a462828c4e3c358f83ed263a8d8d2dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
0f5abb407e84d3119e4d810fe6f1ee81

SHA1
be65884528c6af214af886d144d2fb9056720b4b

SHA256
f7e610550f9c2d204b62cdbfe7f1aa19eb4c6696316f4238d8a973a08e72dd87

SHA512
3136cc0ac835f23597778891eef4bd89a6f6bfd95ace8ade031ea7da2fc9729f18518b1369055889e74ddd208b412da13893c112921e27d962ed37af0f1694aa

Download Submit