62ee1228a34b676cac0fcb848ceb348272ea3e0fb744351e609b20a4d58e836e

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
09/05/2024, 17:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2b1b86939e7121e4ad5f59042f75739b_JaffaCakes118.html
Size

33KB
MD5

2b1b86939e7121e4ad5f59042f75739b
SHA1

d268fd04da12b42f02dd9fd80434e2bb30952ecc
SHA256

62ee1228a34b676cac0fcb848ceb348272ea3e0fb744351e609b20a4d58e836e
SHA512

0221c519961ae16e9d7b3a0c0d5158f093e60265362a24f5c3b46188a2c9ccc0339fcdd073477aa281e709bda1fc71473bd9353a31d7e183358cd55a08814829
SSDEEP

768:ZdyH1vPVYoLLpW1KO2TwSRPaNJgISp8bP0KsAjArd+mz/2SZPpn:ZEH11Y+VW1Wl8mzN

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2004	msedge.exe
2004	msedge.exe
852	msedge.exe
852	msedge.exe
4640	identity_helper.exe
4640	identity_helper.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 852 wrote to memory of 2156	852	msedge.exe	82
PID 852 wrote to memory of 2156	852	msedge.exe	82
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 1684	852	msedge.exe	85
PID 852 wrote to memory of 2004	852	msedge.exe	86
PID 852 wrote to memory of 2004	852	msedge.exe	86
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87
PID 852 wrote to memory of 3644	852	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2b1b86939e7121e4ad5f59042f75739b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8daf946f8,0x7ff8daf94708,0x7ff8daf94718
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2016 /prefetch:2
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,13728754391033093898,13755200393991420130,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5152 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4716

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4828

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2424

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ae54e9db2e89f2c54da8cc0bfcbd26bd

SHA1
a88af6c673609ecbc51a1a60dfbc8577830d2b5d

SHA256
5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af

SHA512
e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f53207a5ca2ef5c7e976cbb3cb26d870

SHA1
49a8cc44f53da77bb3dfb36fc7676ed54675db43

SHA256
19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23

SHA512
be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
dceb1aa0acf1f86316f9dd169e21932c

SHA1
238cc3f155175ebaa8a97271130ca3ad2f055249

SHA256
1cd6bdad9b36858ef45b7e01d87358267eb0698ca0787c0837c3fdf773ae6706

SHA512
9a8b3d8a6bae6aac78ff2db9fe7dbde8fc51310b5615b6a85395703640e16473023cabeccba0eeecaa9e4ed3a075f903b631273dbab421832d23e87e55eaa5dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
2c12d2affe4f32248a96fcf900b1b9f6

SHA1
db584505d35e31fc90a649dfda769e2a7342e881

SHA256
63a91c75170c2cbefc230e941d3f316c224dd7a671c887b3754ec42d597fe879

SHA512
c1bfaf6854e6fc7b689e30db61df6d83f9cfc2d33deaf0667b02f7497f80505806df3ce15e8acf5697883462b9af7b05ae01b19e15e19f26cbcef79a3af71d93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
102902cfba468d0e96fe40fb241b19a8

SHA1
33513ff7b90970ad7b47dd0e6475d14f2705e4a3

SHA256
1f01579b36fd6aa22a22b9ad8f8f2004193885190a6ceac9137fe4402cb2f110

SHA512
df601bbd7e571ae133450a8405f7271a7a21e33c1dfa449c0a45e9af67c8da6d86928dbe6bfe7752850acc81e97e2f776f6807c4bc1e91f04b0ca0d1c3008fb8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e8343466f7afb56601db38e3cf67d73d

SHA1
85e9d754ac87a15bc0a0d95f70301ca8309b4cb0

SHA256
654edf5135b8698f56fe892bf3e7052279bef584aa66fad4b89b87f7ae3406cd

SHA512
b8f57ec911f06319163b36f43ed205ce2a4b00a13bb24617356b0d4637baba1ade18ec0e9b4035f6d94319f5d3a31387a8efca03146ff3e1980a26f6d30b3e62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
74eab10f42911b5901579d68057f27cc

SHA1
3eb81a8b5a4d04b6b2bf614365a37f71e4c7be62

SHA256
7abeffb4601931f23887e03624bef1b3262791a12b1729be70baa8c6d2b892ab

SHA512
248eb79c1b8a724da0d6fdf895e6dac4c2663e03a8e2382b5025a309c97f4cff8ac2e345c0e55377846b5ad1167aacb903191aa52416d9f1214fc0a3f8b5c7f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
85427803ddd4922d4846751eb02504c9

SHA1
8b11da3d90a19b85269efd260433aaf154149d5f

SHA256
91bccd0eb7fb8044022f944e45ab40667bf56b882d061aaf1fd781b8fb237303

SHA512
4e820f8022c42877cb1ebd141a857e8577c74592be2447df24d6d397f07476f4112d7825b136a76144fc2a320922e403476bbdd97d9d80cf1a7660fd1170cfda

Download Submit