78110213edc34e5cd07c59bf9344d3622a587f2ff72752ac1cb83ecbcea979a4

Analysis

max time kernel
146s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
04/05/2024, 14:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

130a9896dcd52599392cc5e71a892a9e_JaffaCakes118.html
Size

55KB
MD5

130a9896dcd52599392cc5e71a892a9e
SHA1

a8707e6b55f66a5a4148cb99c7b5f6b67a4a0004
SHA256

78110213edc34e5cd07c59bf9344d3622a587f2ff72752ac1cb83ecbcea979a4
SHA512

2a34e3971491fb4bece018ca03c71b405ad7f5011fb7fc7c795f98bd10784910725b501c844445fbeff1d43ce9f74971aef4f045dd81c55b408f0185800e2908
SSDEEP

1536:NeG54foJ0ZKEZMd5oQNXaRxl8ms6cUaBPUaVnuYdMVjq5xZcSece9cWyfJd9p:B4foJ0ZKEZMd5oQNXaRxD1kdMI5xZcOl

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3528	msedge.exe
3528	msedge.exe
2816	msedge.exe
2816	msedge.exe
2628	identity_helper.exe
2628	identity_helper.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2816 wrote to memory of 4772	2816	msedge.exe	83
PID 2816 wrote to memory of 4772	2816	msedge.exe	83
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 4436	2816	msedge.exe	84
PID 2816 wrote to memory of 3528	2816	msedge.exe	85
PID 2816 wrote to memory of 3528	2816	msedge.exe	85
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86
PID 2816 wrote to memory of 4392	2816	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\130a9896dcd52599392cc5e71a892a9e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9aba546f8,0x7ff9aba54708,0x7ff9aba54718
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,12132321116901333320,8031117878659821840,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,12132321116901333320,8031117878659821840,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,12132321116901333320,8031117878659821840,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12132321116901333320,8031117878659821840,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12132321116901333320,8031117878659821840,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,12132321116901333320,8031117878659821840,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,12132321116901333320,8031117878659821840,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12132321116901333320,8031117878659821840,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12132321116901333320,8031117878659821840,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5104 /prefetch:1
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12132321116901333320,8031117878659821840,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12132321116901333320,8031117878659821840,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,12132321116901333320,8031117878659821840,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5012 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2924

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3224

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2128

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c9c4c494f8fba32d95ba2125f00586a3

SHA1
8a600205528aef7953144f1cf6f7a5115e3611de

SHA256
a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b

SHA512
9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dc6fc5e708279a3310fe55d9c44743d

SHA1
a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2

SHA256
a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8

SHA512
5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0c30b194-98f4-47c8-ac7a-00d6dfd43c1a.tmp

Filesize
371B

MD5
c18c06c981533dc295e94109966e8f0e

SHA1
6d2109906f73b3dd4f505bf2c646a3fe8c59049e

SHA256
939a27b1bf24b559b8f42dc6974f44892b2cfc2aa852fae038a33dafa5485cdd

SHA512
5c40f52546de95b12ea18f5d20ec22b03ef2301cf63a0d233a672ef1d729f08d173577f3bad6438890195c7375300a3f5c49d4fc12de8890417f3d797db6ad78

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
556B

MD5
584c9c6c4ecdc14ba10e77d21937497a

SHA1
cf96ec441e951f3e7bf4cc9f3293e69a3d62efaa

SHA256
0aa3606c254ebd517bb831dc8ff1b191845ea4043b903ef0815daf6feec934ae

SHA512
a7aea087d03c2a0745a9b799e944ed2f8c3fca11a448417a34ee1af0f0d2f4aabe9dc5a06d1923cc8ed2ffa1d04cf8c24d8cc9bd5e4fa8ffbc4ddbc4b0c30935

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c12df42f6a4258590b1ffd0359997006

SHA1
4fc7560a3d36570eed452c2e26cf37388c98e9b6

SHA256
29e6cfc8eaa022e025813739f320a146a237394c19c049ebd6de163462700744

SHA512
4ba354e28830955daff4581bdedd1154cad1938a40d89bcc425e18f48ea008ab524f155f5b377355ff23627eef414333795b642b61e1f2070e394dbedd035b53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
82157430f73605bbf331cfe92a12d8e2

SHA1
fb6bfc293e47a7c9ea45e20f4c58088c15dedf6e

SHA256
489a606e6fcb0081ca594bf2552b06dd8a3433595b5cbfff949f166d1b04fe88

SHA512
e61a11fba6f9357e5fc764e0a79aeb24d83fc8f62f83bb2db3b72932df48977e12a58be98537593c2f816bd0cfb9d71f874eeef90ee57e874e267d126a2b336e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
114a9e6e11ba8706efc96cbcc1516cc3

SHA1
019fc135aa64e4e204d8df6ce02cea41fe836aa9

SHA256
ac1bad17215ce59c5f0cafed4f14e7c163932b5170009b19424c0af536aae494

SHA512
c4d810832e910270016e95ceae622fb685f6b78fba10d6c8b8aa9b30ea6cf6885501ba86c9dd3da7f284ea1008d3d330c479eb05ef51f1bf6c28bc4a6acdc3d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
5042e6e55736fb7c69caf646eafe0886

SHA1
1f480e472821fb932e16e4db1a6984167f196fb0

SHA256
78d0c3e4cde93584944b62d6b2fc9f43f16fbea950c8730f66327687868b8798

SHA512
afaf0e27e9b93ad5b8a07d2462de63df972d9e2528d57205760803a28f0fca5fb10405d95631b161768312b87b7ec3abbbc03936464c8acd6cfa40aab4378379

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5930ea.TMP

Filesize
371B

MD5
63865f09037eac94b10ae3bbd263b7b2

SHA1
20ac86376da1d44e9683dd8eb45aca8228584b40

SHA256
ea627edc9072ea3bfa09b2419c9785cd4d04eed6f4b003cdfcf7b954956e5b7a

SHA512
0d1c5e296e1de93bcf807dd746982620851d22d7db757ee0ef55fbe460e91d0ef231a0741f23ead96b83aa5b4cc8b5f478c65fc7fee5926ce3d544a66529042a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
697f4be1e8c29db2844de24c7de621f6

SHA1
2b36df2d604bda26fea2aa34fc5ea8627f006538

SHA256
35bf10603482b7a58bc7f7e646aed11abd3ff04cfb9213177d73818c772502c1

SHA512
f2b113079702f72cffab445e80a89ae2d8bd2d5c8ad0e62c17e45dc01c2b785e11673dad20bf563e721ba0e6a2c9c91d62a8b75fd6914605435bd85d8f299b2e

Download Submit