0607682f164ab4dc9d0c138bdaeba9ce957c4e638ccab67f68f842ee75a77245

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
11/05/2024, 23:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

37354644adb73c2fc2f600e1db713525_JaffaCakes118.html
Size

175KB
MD5

37354644adb73c2fc2f600e1db713525
SHA1

50427b82b26269ec85386597166580acb136b362
SHA256

0607682f164ab4dc9d0c138bdaeba9ce957c4e638ccab67f68f842ee75a77245
SHA512

07e40d32c695c31aeb5e4be5267d0bc5eb548ec01b44aa408c48d7cfd12de899383a6bbe259e9b335aa980ee9c89e2823ed61b253e99a080c4cde2152cfcb87a
SSDEEP

1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS3eGNkFhYfBCJiZ0+aeTH+WK/Lf1/hpnVSV:S9CT3e/F0BCJiDB

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5108	msedge.exe
5108	msedge.exe
3776	msedge.exe
3776	msedge.exe
1608	identity_helper.exe
1608	identity_helper.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3776 wrote to memory of 1612	3776	msedge.exe	82
PID 3776 wrote to memory of 1612	3776	msedge.exe	82
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 2336	3776	msedge.exe	83
PID 3776 wrote to memory of 5108	3776	msedge.exe	84
PID 3776 wrote to memory of 5108	3776	msedge.exe	84
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85
PID 3776 wrote to memory of 2408	3776	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\37354644adb73c2fc2f600e1db713525_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8eb9146f8,0x7ff8eb914708,0x7ff8eb914718
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2840 /prefetch:8
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5156 /prefetch:1
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,2972800734753482932,5696571319608781422,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6032 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4772

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3940

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:796

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2240

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ae54e9db2e89f2c54da8cc0bfcbd26bd

SHA1
a88af6c673609ecbc51a1a60dfbc8577830d2b5d

SHA256
5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af

SHA512
e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f53207a5ca2ef5c7e976cbb3cb26d870

SHA1
49a8cc44f53da77bb3dfb36fc7676ed54675db43

SHA256
19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23

SHA512
be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
04deb5989248f49f3dbbf7d40bee695c

SHA1
e731f50ac5acbaedc07735c2e9d7eaa934a8a0a4

SHA256
9ccfb5a086bdbe7d76a67d3a62b7cbbaac5524802fc89a781fba3beecd169d63

SHA512
828ef46977159f9f77d4ce053e4acfb2a2c56c80b8da432323a86df54b490ea0b11d25d1f85ece0c7f4798bb3c69d78845509a3429db994fe572e09bfa37d8b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
a9bf082f339afbab5db0bd7d4f41f321

SHA1
c0b50235e8f3d5d7a8d9af446b4da8e2b8f94623

SHA256
b3eb6e08af16fd7469430f862230580cded1a8133dccc26d9f72ae3286c3317d

SHA512
7e4437fb964c9c2982a1dc1cafc66f8ad9c2efb1233250b2972c00d02db6081c000de172d6d27aba71a64a73e412f0f7f425b400f66d46124774f2a54eba81ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
966ee6f2325d25688d4aa0ff9eb1a91c

SHA1
530ceca62d20a69d42b55500c2edc7163b43765f

SHA256
acb4b7ef6e35e8f66926e760e073ebf0dc78651d5a888f4a446859e30cee2983

SHA512
f03db47bc5c146a77d923d6f450c468e2223d569fe18f53c35b7d893743fa9c940aa2fae098804193d55ae7a65d5de3a2a309fc2c486d33022fb13d343b67461

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
167eb2fb1271c5d1aff592da123f71ea

SHA1
2e9427a6a2ffeee60d597a945691977b8d71c913

SHA256
c7ecd50f396e6d0e496e14a687a9969f91e59e8fecc5fa73a2db2365cc7357c6

SHA512
49b17d02f27794c97dc3d2d92d8ae59e3ac00f8a80494ed8eaaee7e9239a6f4692332cc67e01a3cad93c9f75749a4f5dc8e1c4041dbbcc467ab1e8774e2697de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d2b3f13daf352073470aa7415fc4b3e4

SHA1
6679017fbfa10363a7c977ae6f91fc4e79a96a68

SHA256
46691fea0108a496a05c0db8f27d81b78cb87404769bad5ad6a9acaf43666356

SHA512
6e36100257bcd50636aa6b2d11c7f34ec23c9d2c92650c5f0b6692e7e8783554c20d201fc5435968e7b20707a267b959fdb082ff21b78c5abaf862e615eaaa2d

Download Submit