d8e9d05accadf77c77dcd12da6912ad938c4b032d983b550fe716e3fda1c1771

Analysis

max time kernel
141s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
30/05/2024, 12:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

842bd5f61cbfca6be5517a0ff5eddff6_JaffaCakes118.html
Size

52KB
MD5

842bd5f61cbfca6be5517a0ff5eddff6
SHA1

96934ff57c6e439f4bba7a556c1a2bd677aeb6a7
SHA256

d8e9d05accadf77c77dcd12da6912ad938c4b032d983b550fe716e3fda1c1771
SHA512

e75b849fee0422740a24cfd5d79e34b27f89626647297cda18be51f89c7d42fb2c5470dcff94de9d47d5f8b372c39ef47fab154609ca155b33367aa407da06f5
SSDEEP

1536:Sd9NaYT//XsnzNm9F18HRO9BsnzNm9F18HVAv9UmWplBX+i2rlANEapjaCQUF6Lq:Sd9NaYT//Xsn4cO9Bsn4QplBX+i2rlAd

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2984	msedge.exe
2984	msedge.exe
3388	msedge.exe
3388	msedge.exe
3424	identity_helper.exe
3424	identity_helper.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3388 wrote to memory of 1608	3388	msedge.exe	82
PID 3388 wrote to memory of 1608	3388	msedge.exe	82
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 4464	3388	msedge.exe	83
PID 3388 wrote to memory of 2984	3388	msedge.exe	84
PID 3388 wrote to memory of 2984	3388	msedge.exe	84
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85
PID 3388 wrote to memory of 4968	3388	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\842bd5f61cbfca6be5517a0ff5eddff6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffffdf846f8,0x7ffffdf84708,0x7ffffdf84718
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2848 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5464 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,13195900960791013598,1247224782267590533,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5432 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4748

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2708

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1900

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2daa93382bba07cbc40af372d30ec576

SHA1
c5e709dc3e2e4df2ff841fbde3e30170e7428a94

SHA256
1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30

SHA512
65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecdc2754d7d2ae862272153aa9b9ca6e

SHA1
c19bed1c6e1c998b9fa93298639ad7961339147d

SHA256
a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7

SHA512
cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
cdc89c495fabb30130c18c78038a9f92

SHA1
b0be04b206b5a4c46af62045fd707a40848387d8

SHA256
880d012704bdc095a9c8dc0bbb318b3255341b3f7c81aa5a0fbda294964fd7f6

SHA512
3baedea3d807dae23292556db2d311a2e1f1f8845fb7344c7d28470881d0dc108f8a9b32cc8c14a528a397e68fe03c55304b43fdcfe18826f19fd9f8c87f02b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
844B

MD5
bdbb6eca10c7cebd4edbd1a1c99da9d4

SHA1
e6bf6eff3cd89df2ea492a898c053e96cb426d07

SHA256
0e7f6f7937ee16a1596222943d4fc0be39ed47cf8eb8214b182bbcc1dbe574ab

SHA512
180549eb68ee2bb8c5ad3bbd7c9a0eb78f3456be83dbcad25c6f80c7d08f5500a2d51fe76592f75d3d4d80d2778c299afa11f167df9712e2cca9cc89f2b958a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
21a519cf1b575c19b3003d5d13d58636

SHA1
42483f33caa87f176bd2fde1e6ffab819ab23061

SHA256
4771a2cf3dd2d85840a534b75b2c665b83d50282a20f8ca5d88d93ac2b86db08

SHA512
f1aad5a7b2943cf51d47ad09e7e0eea2a8e5e67fe2388bb79eda9c74ed35df58bca593f8c5abde76b130757ca29c1058e615ba3664b15bed6657ae5685a556a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2d2cb43bbf5dcc6a0e2a543f40f3fafc

SHA1
744941ac4d2203f9612c5e59a234cd6ef3abf9e9

SHA256
f4ffba8c381389e4f1b31dfbedf7d7de7ce039be5a88eee68aebe05dc89b0941

SHA512
6211593918c99ad41d9a4856445788506c07c05cbf49a8e3eb505ddb08cc4cd1e382ae3d8035820f9078e4cbd276267011a5a09726e4c8fc56bb8efa9810d048

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
516a564348c45cd3f3aa0a55603af180

SHA1
a5b0c53f71d23586371eced8d28b70b004f9e16f

SHA256
56b52d661c0d68ceee36e60b45e53c857342af3952fcd80f8c04579b46eb5cce

SHA512
cfd0167ba749afe03fde224549af6c98d49b334ab4e244e322f7b6a652c671b7276d62d6468d8507a3068ee31746bff06f6399da38d767bf74284b897c4092e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
05625bfb0d2011fc15cca0b225383bac

SHA1
548717f75f5a3eddfe070ef7ecf9296405f866f9

SHA256
4e4a11271d2868fed1069e9bf25968d40490e1aac77a0c9f9c9885f9c2698b07

SHA512
b0b73c21f6bc8689e0b555639ed43b7b3821f355f4e8e14b0c16423f407a0efbd2ceee44b2f5d106a3cbad2094692d3c2e2f197b0f1b4e13d66e14e01862f57b

Download Submit