07c94620eb6f05741d47353e31b9984ffd93351ee58d780184fd2335d21c6445

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
23/05/2024, 13:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

6b1d32b4dc28f0c78b4a184d4b8fe03f_JaffaCakes118.html
Size

209KB
MD5

6b1d32b4dc28f0c78b4a184d4b8fe03f
SHA1

79a9c099b304761c4bb243240e485f82c508e358
SHA256

07c94620eb6f05741d47353e31b9984ffd93351ee58d780184fd2335d21c6445
SHA512

12c893348de5a7f676f9fee5201efef6cfde0094818fa183c608a1af9222716a0f27d49781bb6e659d904915c32526a0ad463aa5266cb881450263e4b13213ac
SSDEEP

3072:utPaBub1DGRXOcHcXcDcAc2cMcacdcOclcycOckcbcAcjc+cycScqqcw0cH0c0w9:utPr1MqnrYLsp

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4760	msedge.exe
4760	msedge.exe
4788	msedge.exe
4788	msedge.exe
4484	identity_helper.exe
4484	identity_helper.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4788 wrote to memory of 3920	4788	msedge.exe	84
PID 4788 wrote to memory of 3920	4788	msedge.exe	84
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 336	4788	msedge.exe	85
PID 4788 wrote to memory of 4760	4788	msedge.exe	86
PID 4788 wrote to memory of 4760	4788	msedge.exe	86
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87
PID 4788 wrote to memory of 628	4788	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6b1d32b4dc28f0c78b4a184d4b8fe03f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffffc5d46f8,0x7ffffc5d4708,0x7ffffc5d4718
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2828 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4688 /prefetch:1
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4092 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,1656510067504180289,18417612717729888454,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5356 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3972

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3108

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4808

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2daa93382bba07cbc40af372d30ec576

SHA1
c5e709dc3e2e4df2ff841fbde3e30170e7428a94

SHA256
1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30

SHA512
65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecdc2754d7d2ae862272153aa9b9ca6e

SHA1
c19bed1c6e1c998b9fa93298639ad7961339147d

SHA256
a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7

SHA512
cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
a1d999f41375fdd7f7748ff36abb8be7

SHA1
c727989d09c16ec0018978e724675d8bb1c4e423

SHA256
c4b812f81200b2baa8b495c5b3f5ac605082d17277eef9dd46e7b7faa9eba23f

SHA512
58919c17cea8a654ffc320c960563d48cc798f218360bebcc7b0864b448d2f1d03ad595f554fd74d372d7a05e1083f96fbb853abae6370b2b06e666983ccd087

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
2bd3014c5962bf3039d47b9e36028dcc

SHA1
a9c04650fc719db78d5cc34a7d4799333c81e231

SHA256
cd67723b343f0152500132ec57ab0f111764d9750870c65b029405e0e614642c

SHA512
b835abbdb259f09b56060e8433d33b383d6ef079e29c234975f6e031a4bedbd96d71df8001dcdbd331e18ffe439a98481609b04ea878429cadfd10b773b33908

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
d45529fa171f73717090bf3dc03331ef

SHA1
6c7f4851b218e7e8e35953878795e0da2ef2e449

SHA256
d630d02055bdeea72f599a79a7d4679c71a1ff514e46b6c4e7ee206541dbda9a

SHA512
af05079854cb15c40d2c9e7fa97c2a0e89725c87118e4f8d0a36fa31951e1b96c555f090b87fa7bf384d1df9648672f8769171cae4074c531d4782f4fc7b92fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
683d9d0c8cdec440b025a554c4a6acc6

SHA1
d6ca5935fe5d0010ad8f976b9d2eb50ecd801b63

SHA256
6015a2c5bb3de375baae746f45a377aa047835bcdeffa85873dee4d8d76cc2bb

SHA512
7f8732eb9912af6e1952cca20759270641644899dcc224645fde5df449a5893f0913a1ed0f69868a6aeccfffd499923173a15fdb77baeab93d89ff5a4664402a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
10c64c593c9725040f52eaa7ea94d208

SHA1
1387ecda5b552a00e942507532744f93905fa150

SHA256
4eedb81a1cb126056f079eec475c232bf417a3f5c968d72d3539aec9c9ada22a

SHA512
6f77de18d85e59860d7297680092be7aca4b542861425b5f8fa9918c49f6916f32e9e772dede96a860eb20739bce6dd0a541448438255e44a1e99bf541a108b7

Download Submit