96e537104909ec78e48913de56c7e0374645702611664d8758f8b9db5dc4f634

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
10/05/2024, 11:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2efe1ea847959c4c269ed770e11fc9e1_JaffaCakes118.html
Size

29KB
MD5

2efe1ea847959c4c269ed770e11fc9e1
SHA1

37e7efaad4f9fea384efaf00fa93c913630be242
SHA256

96e537104909ec78e48913de56c7e0374645702611664d8758f8b9db5dc4f634
SHA512

2bd6a06053194d4303b394e465f59bf4e7475f747f52cbb10ca9528c49e851474a0908d00c1a6c03c74d36eaa19acec84b02fd84ec8da862b48184e43e4db78b
SSDEEP

384:sqMM8ujOQOu2kc2NGV5CrK2u9H/rZvfHjjVFLF0Fu2rzhpepJOUig5z:DMM8oOQOu10xHHnVFLF0Fu2rzhcDOUT1

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
948	msedge.exe
948	msedge.exe
540	msedge.exe
540	msedge.exe
1156	identity_helper.exe
1156	identity_helper.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 540 wrote to memory of 1124	540	msedge.exe	82
PID 540 wrote to memory of 1124	540	msedge.exe	82
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 4588	540	msedge.exe	83
PID 540 wrote to memory of 948	540	msedge.exe	84
PID 540 wrote to memory of 948	540	msedge.exe	84
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86
PID 540 wrote to memory of 3260	540	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2efe1ea847959c4c269ed770e11fc9e1_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffef99446f8,0x7ffef9944708,0x7ffef9944718
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,1325897862062961825,17012166822890159568,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,1325897862062961825,17012166822890159568,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,1325897862062961825,17012166822890159568,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,1325897862062961825,17012166822890159568,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,1325897862062961825,17012166822890159568,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,1325897862062961825,17012166822890159568,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,1325897862062961825,17012166822890159568,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,1325897862062961825,17012166822890159568,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,1325897862062961825,17012166822890159568,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,1325897862062961825,17012166822890159568,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,1325897862062961825,17012166822890159568,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,1325897862062961825,17012166822890159568,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,1325897862062961825,17012166822890159568,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4752

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2332

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2104

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1ac567777340a417820c2c51467da675

SHA1
4b12a068d4f525be027f352b98f62263873bc0ff

SHA256
327f4d917765172aca697f40850f8184429c0ac76aad22d99bf81eb95ba05c32

SHA512
0eac3347e2d299ba40ef318b9eb268c9364357e58efc2b72ef4c474ef1090d7fb38afa8a33a631b72f023f6a6312e0cb863b879bc280e04e6462eaeda998f02b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c4a07e8bb84cb3e6821251cade768862

SHA1
e044f3c99dad7cd008e30a0700cdffa1d24982df

SHA256
3dbd6d72430c5162add2fbbe1f89c3ac517695cecd12391d341607198a229613

SHA512
a39c33c3f12292928abd3dd996b386e19440aac1a11c14b89cb6e7799208b712d8ba4d481f525fcdf74e6aaf9e8b40e5af51c82fa261c837475db2251c5c9d9e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a667f29faa099c7f944faed6d6d0c2fa

SHA1
db6f6e5037be945f405f8360e9c22aa8d050b636

SHA256
8a181db66324beab76583b4b7d880e49ee9dea1d6fa11c1ea26cce73bb6f3af0

SHA512
3b9ac6fbb1d62bff7a295cd9b373a7db87a7cda57dbe146a05c992fe6e3b7f3f8771cf92d0ff8f5075baa93309d30b3718ed347f655feb905cbb53be7e333da9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f4a090beeef034f3e99f74742324f6c9

SHA1
3a8c37ebc3ba759c4483848fe1bca69db6391210

SHA256
2ab1331edc1ee05e0ab0a09bf5d483c374869d7374439dddd4c7fcd9acb1bdbc

SHA512
719fa0fceb40ce27026b6734ceaefe7d4296f2823f50f7746743a1e000e1e1fd4d4a8089c9be5f9f115939851d1c52bc98fdcbab4565a571c52347ac9f31d361

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d8065ca68b6d5b988c7aa02812281a85

SHA1
a1e54cf5371ed747a0265f911ac3494e3dc166db

SHA256
019359e71e752bce979c9331c38da39b744095795617ec4c36d9b6ea63c8e2d0

SHA512
35cf071159dc3322910c206be34e7f2ebbaac7428243010a918f28d19f9a03bce27c00d5a7a762c30e59018f97c59fd3efb5def2f1075ad544af34fc89f6722c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
4a21d8fc8f66688bf0f90a0fcdffd615

SHA1
806d7fc50342a327a8462689073a69c89fac10f2

SHA256
7f237570825c89e1b0ee690905053f7f67a21b8d826ba002c1d6dfa909d00170

SHA512
89f70fc8e18824aeaaf6b4aa2095f99d9b8247a188c3a1cff56f2158d4d6366546eb3017b61bfc7239b07c7f5ef934b7e15ef6d046a6a5303afdfb58f7676f5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe587e91.TMP

Filesize
370B

MD5
a8d00336a13974fa92a6012d5eb3aa7a

SHA1
78f867a56b9ee3ce6bd875d12ff6ecd44ca0c0c9

SHA256
2ed72227593261711988021f5298049ba99db33e3b1250a13a721082c3494af1

SHA512
02074f1bdc128277d50e01ab006952a483ca1a55cb11df6bba24df5ab4057f18da850c0b00450b7b5694b0f037122d27d693618d1e06008b92d8e54a9721a35c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
6ff3014754bc69815499ebfc3a160c3f

SHA1
f3af29266933c58b97fdf9bb913c366af362d435

SHA256
d84be0f651e61f688b813b176ccd67b7af4f9c28cd676f407977f8cdfa591e6e

SHA512
0c4d8ee7f50d3128f39d0d206ecf362ada5abf4c6443adc2ec2ff2e07c1db41e08470e28674ec3a9786ff0e9c5317ad2e32fc71120835e02026f9a1b07731c78

Download Submit