6e457846b2aae68927b8a49530ea7eee23927fcab90ba4f41d29386d851a2750

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
09/05/2024, 07:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

28febb630df9a851f2d6fb54b8f8bcf5_JaffaCakes118.html
Size

69KB
MD5

28febb630df9a851f2d6fb54b8f8bcf5
SHA1

d7b46cf1ba0983b83d05922de23ba13483b6dc67
SHA256

6e457846b2aae68927b8a49530ea7eee23927fcab90ba4f41d29386d851a2750
SHA512

fa1ac6127593b13bd39cf288525fdd8ae035745ece858736f58c650b86a8831d65ad73a7e15eeb33862897e3a77d4997392d2ff2639b0c6f4e40999d1f9f1245
SSDEEP

1536:euGW1OGWQIaAkD5huvJQe0seIeecBePqGtS4c1reA6FLiAfaYdhU:sW1OGWjOOZiAfawU

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe
972	msedge.exe
972	msedge.exe
5056	identity_helper.exe
5056	identity_helper.exe
3720	msedge.exe
3720	msedge.exe
3720	msedge.exe
3720	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 972 wrote to memory of 4324	972	msedge.exe	82
PID 972 wrote to memory of 4324	972	msedge.exe	82
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3356	972	msedge.exe	83
PID 972 wrote to memory of 3572	972	msedge.exe	84
PID 972 wrote to memory of 3572	972	msedge.exe	84
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85
PID 972 wrote to memory of 2140	972	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\28febb630df9a851f2d6fb54b8f8bcf5_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffceba246f8,0x7ffceba24708,0x7ffceba24718
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2220,14076463867088109943,16167820148787054880,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2220,14076463867088109943,16167820148787054880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2220,14076463867088109943,16167820148787054880,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2828 /prefetch:8
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,14076463867088109943,16167820148787054880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,14076463867088109943,16167820148787054880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,14076463867088109943,16167820148787054880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2092 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2220,14076463867088109943,16167820148787054880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2220,14076463867088109943,16167820148787054880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,14076463867088109943,16167820148787054880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,14076463867088109943,16167820148787054880,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,14076463867088109943,16167820148787054880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,14076463867088109943,16167820148787054880,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2220,14076463867088109943,16167820148787054880,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5092 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3720

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4632

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1840

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ae54e9db2e89f2c54da8cc0bfcbd26bd

SHA1
a88af6c673609ecbc51a1a60dfbc8577830d2b5d

SHA256
5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af

SHA512
e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f53207a5ca2ef5c7e976cbb3cb26d870

SHA1
49a8cc44f53da77bb3dfb36fc7676ed54675db43

SHA256
19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23

SHA512
be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
3c71582ab73fcdfea95054886b0cb65a

SHA1
236870335452d116c8ad36b400096b9540dd2f4c

SHA256
7c1e45e5a4f293b18a2e9f04efd544370733a4dc314aaea537fbdf0b7e3e4561

SHA512
1189600b057b122829910a8a1a58dd877829dd37635b14374789b939e0021c91c22fa97fe50cd7df0aa69f58ec3c428428a45cd3f59aac8cbc4506da58846a43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
709B

MD5
5474b776f2c76df370a3121ca3d60535

SHA1
2cdf4319361bd1c8a7b7b5829319c630b3a646b8

SHA256
397095a00859f099daaf8503a0c9b373dee81d987f845407111f438d34931edd

SHA512
37fa8fa49424932aca596e81643db61a5ecd69f0d764958d35200be6d3583a5166f41235955805a797f2d27459c1c757943b624664f82bf4204131205df4680a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
82629dc366d3c794a5335103a0790ad1

SHA1
352b885501f2c8f38a0f62a79f243d4b11a92a14

SHA256
a6292c4fd43dbb1e98c48d0507140ff17f6ad7ce8eec4de16d7c5419ff920bbc

SHA512
dad2c3207c422c6439219b270532b0beec6bfa59ce96bba2d64d1fa1193d2abf81d1ea11ed9f1364263ce194dd186bc3e94ed6d851fe0978c952232a20688647

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
059e8366b806b07bca600700e8cdb210

SHA1
d95221ebc1ca5c4a49f9a4922d75b31105e17358

SHA256
4fb2a5496b6732fd82db6b4dadda1948349776baf8ce2485249340d64e81a2c1

SHA512
9297cc1d4ac93aab32a25c5aa195d3d7d9377a372294baa590395151bdcee61491a59868057a3ca30a3ac45774caea6f8250a0970bcd6f75f7931151cd87977f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b35f99eca82fe55627f911549f44bc34

SHA1
a995746877e3592b265ac16b49363baca43e55d9

SHA256
68df442d5b07fbd7128a33f2c2689b56f76359f017369bc3c71892cb65895213

SHA512
c4441ec865037ce5e0d0bf674c20a35d2336eb7922c3131d2633cfe5b43f93a133e12efdd03bd03adff9f96416282beb3dd7faa181b7e74f1b340bdbf30c6bed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
875B

MD5
735d8299e6e185c99861af14226a0fd0

SHA1
73c3443b15fa7159d53c394466d973c31e04aadc

SHA256
edb614b264f9807d86d4806228fc873560aa090bfe64966784ee4d28ec902a55

SHA512
7ccd0f9d4657793e781c0372a153f14f0e5efe580ab1d30c00e58f35c717150fa188eda523cb3d55ea7e892ab4bd1518aaddb5b943e120c045c07c081dcb282a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
875B

MD5
694434abd5b3eb418f394bc11487cbb2

SHA1
780a12ae3a0cce14659d87288963a4182d9dd07c

SHA256
e549d8b26ed914d7f16508ede97a1de59d37062d9dea7423f2df92c18cc8f987

SHA512
bbb93563809702420cf69af20a7f48319d8043e88de44ce78fdc4d4edd3936ac46570cfb8f93bb3ce012666e57cff21cf7afc799d73d196272410aa3b8c9d390

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580d88.TMP

Filesize
371B

MD5
c87326b1c5690bdd6cfd3b0d70354d6b

SHA1
bb4ad0f01d6cab16e393263b11d534874b8daf2d

SHA256
779985bd0a31af0e42b3f571343eb7d8b773ca9bbb50dcab6c07640d6773a1e7

SHA512
6c1c383f40a5b471a898d329cdcd68df9ae0bc2665215cb9e48435b858db994050b8cf55c79997854882e5722a637b551b6134b3acba1651b4dd54ce580a69e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
01d7c4b55be1dcde42898bea30a8ef72

SHA1
769d451d9f54133ac19d97ff2b547d86a107d233

SHA256
2b3f1852767b7c25d17f27cffc4151f504ab5e6005babb783f9bf8fb4fdf59c8

SHA512
d5902b6c38cbcf65b3475c7918aacf67bc726fc11216e265cad7397f9ff9bc55434a8326b33bce2fcd9a8b6a36d57fcef69c7bbe9643cf5bfccfecfc1a8cbd31

Download Submit