2068a7519608f155c7d4f4098f798c1b9f9b473e165b4fd12df0727352c8725b

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
01/06/2024, 00:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

88e04de217996c56913026e6d5206c85_JaffaCakes118.html
Size

61KB
MD5

88e04de217996c56913026e6d5206c85
SHA1

b9e8c522f5133c85ddcd826aedf51a342aeb0f82
SHA256

2068a7519608f155c7d4f4098f798c1b9f9b473e165b4fd12df0727352c8725b
SHA512

a250f1bf55c57041760cf5d0831ae9c417b3a906d529471ad61c7850eaeec800c72edff70a41b3e5b0161a80cff908eea45b3849d2fb2cc0c4ec898997daaf5e
SSDEEP

768:ctT0EipB1tiIks3CCqobvKpz89VBNhm74TIuboJ1Vugtj:ATupB1tiWCCq+vKpz89LNcLukJP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1896	msedge.exe
1896	msedge.exe
320	msedge.exe
320	msedge.exe
2172	identity_helper.exe
2172	identity_helper.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 320 wrote to memory of 2956	320	msedge.exe	83
PID 320 wrote to memory of 2956	320	msedge.exe	83
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 2528	320	msedge.exe	84
PID 320 wrote to memory of 1896	320	msedge.exe	85
PID 320 wrote to memory of 1896	320	msedge.exe	85
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86
PID 320 wrote to memory of 4652	320	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\88e04de217996c56913026e6d5206c85_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd4dd946f8,0x7ffd4dd94708,0x7ffd4dd94718
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2848 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2204 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,3365771920660112005,10437419622309181133,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5436 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4568

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3988

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4b4f91fa1b362ba5341ecb2836438dea

SHA1
9561f5aabed742404d455da735259a2c6781fa07

SHA256
d824b742eace197ddc8b6ed5d918f390fde4b0fbf0e371b8e1f2ed40a3b6455c

SHA512
fef22217dcdd8000bc193e25129699d4b8f7a103ca4fe1613baf73ccf67090d9fbae27eb93e4bb8747455853a0a4326f2d0c38df41c8d42351cdcd4132418dac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
eaa3db555ab5bc0cb364826204aad3f0

SHA1
a4cdfaac8de49e6e6e88b335cfeaa7c9e3c563ca

SHA256
ef7baeb1b2ab05ff3c5fbb76c2759db49294654548706c7c8e87f0cde855b86b

SHA512
e13981da51b52c15261ecabb98af32f9b920651b46b10ce0cc823c5878b22eb1420258c80deef204070d1e0bdd3a64d875ac2522e3713a3cf11657aa55aeccd4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
44KB

MD5
23536ccfe05b737ae639fe63ee4cc435

SHA1
6d2e9822835dc3e6117a4d2addfc8f241fbdbc82

SHA256
6ae9edfc411ede03661a3d910fafddab3d6b313d1f4668dc8c5a84c5ab23a3ce

SHA512
f416e36b2322bbebd211fd1ea69c88883f00c7b00f14474a5fcce4a408840c0d1b0304eb8941509a38157d0583485f638959eb7d5b9ae668aa88c1d3eee8dd0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
5f00340fa8306f97083b8a0fc0644353

SHA1
7f2659558a5004b693fef271258fd83a2ffae243

SHA256
7b4d7e6b3ace7a8e7db307359a7c1ca7a90e170832adc976f752f9a0bfc8a705

SHA512
9dd41cb4ed1a32303f0a547c7f69fa950dc315d122f558449004561d1e9bffeb4e8153687b2e12efa2aa96ed34b9222cb83495f532a0b3a4e6da43c05b37e8db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
3ebaed24d3d28506c46c621edbf6e39a

SHA1
27443426829a886e2def366ed9df73c9caa65cae

SHA256
ab454e3873287d3198be52c7d6282883e5f70745212cfd614e38d3f500c4779e

SHA512
64794c36ecac551531e79b7c40788a573b57ceb2628d5c291be608e424940700c239582f0d86781c1a9e8a9e3cf4ba78f97e3e3a810d329a0c1edc26673e932b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
acc7bc9cf54f4b2aa82c4c0ea549d73f

SHA1
03728ccee01a2e1607edf9aca678d41b53a21a58

SHA256
923a77bce507fc6e985953d3df8967d42b7c7030dfecdb8d96383394f494d376

SHA512
3df5b34896035eedcc5ef9b2745f289fef089ace5d575570c13759ab7d04ea0f8846cfb4939b6f9c2694da0a4b00448569b6bec131dcf0bb0314367fec234065

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
b245b0178d4547d8339ad9ef342c0f6d

SHA1
e0caab0ac0eb3cd79e94289c11d9fd3f4efad0c7

SHA256
fed755ddd2d3e922f9e7a4dd87589defc99e2589362719ecae3cdefffa914582

SHA512
59ed54164be8a7d6a3d2d9ed4e760bde681c5cffadac40aca067151817aaf72acdda2d9206ebee75b4cb8569f80a20dd994d50706992f7efac00631c8784fdac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fa82475455623386a13af27bdc490b64

SHA1
305382e9ad2602fca968f5004dc6d932e7591504

SHA256
f6163d7fb8e058e8ce0562f0080ed7adcff4802e857a677c15dc4bf2e61aa2d9

SHA512
b1caa46f3196aab4808e9ebf184c11ee4d3ec0fa7f24fd40516878b626aa0f3ae05dfea5697ad86850a99399b10e1ac4ec6c7b44e6006d58056f083658d5d2ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
c7f5b120acd39015d5fe31fc3b6f838d

SHA1
24e24a4d3c55429a3c25487a6897168a6f2286e7

SHA256
e83e78632c55e3d1bb6271d7a4224ba6c70e59ea40958a7cab4d8653c90a3987

SHA512
2da1c79b5c74597d8e288f46cf27462e63c844152998464636dbf7546793f74c83ca53f84c4ba2b9ad4845ad95e6debac7d42e7e3c50d194ef801a577489634f

Download Submit