928a36df348c46f38ff17a8451426befb1480c121a1a1d9e7095f871ec961c85

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03-06-2024 09:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

91490e13bf3b2f5ab2d5ab694f188fdf_JaffaCakes118.html
Size

96KB
MD5

91490e13bf3b2f5ab2d5ab694f188fdf
SHA1

0bcca9afe18a1f3cff3965651bcce59efcb126c6
SHA256

928a36df348c46f38ff17a8451426befb1480c121a1a1d9e7095f871ec961c85
SHA512

880e647425f4886bc6aa5afb7b34342f7cada712c4b4e3524329f7165adcfe6d767ff68044d264bd16b11ba8dccbefa5fd88b988321b56fbb3eea356a2634ed3
SSDEEP

768:swkHsbwbLUKrIVnE7FE8w2tR5lOu66XYVdiWfYHd66XlO7lOSWa4VlOcWh8H66OZ:sFHssO69Op6IO861OJOTbOzV6SfM4b

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1592	msedge.exe
1592	msedge.exe
3312	msedge.exe
3312	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
1120	identity_helper.exe
1120	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3312 wrote to memory of 924	3312	msedge.exe	82
PID 3312 wrote to memory of 924	3312	msedge.exe	82
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 3652	3312	msedge.exe	83
PID 3312 wrote to memory of 1592	3312	msedge.exe	84
PID 3312 wrote to memory of 1592	3312	msedge.exe	84
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85
PID 3312 wrote to memory of 3912	3312	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\91490e13bf3b2f5ab2d5ab694f188fdf_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xbc,0x108,0x7ffe86fc46f8,0x7ffe86fc4708,0x7ffe86fc4718
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2692 /prefetch:8
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1364 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3756 /prefetch:1
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3032 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5568 /prefetch:8
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5568 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11072938182500015071,16713585778972869825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:448

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1200

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2412

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
c924eb2787f2a6ddadf9ff683e167b8d

SHA1
b3270a6bd6b0da865605e2a7c00d31afd7a8c6ef

SHA256
4a35454706170fc4daab6a51a9dfb41d496b6d2cbd206b8df493a071b1f28f1b

SHA512
8b2e303c3de145a3fa8fc1a31de657910838602d564126b4f10a2a84b66001377e4db9c32c5f04d4ff3e4adb520a8450ea2d2dac53634b6190bd2f06550b5151

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
261B

MD5
091241544895f2b470459382d670dc74

SHA1
153aeb4c2fe23f2e0b631e46933abe3d7e5fbe2c

SHA256
8f33e6929500d4b63836d8dcb44b65884ccd3a0e1e1aa313bb0813f89c0c2d9b

SHA512
a2b85a978fe65ecdb51dcb8b698e781065c1af5a67f0b63eb00c04c1c05dce3e9d93608e03086d87bdf44add5611e1ef98dda422781aeca41c23167a24be3fa8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
fb26d4f5a6a8eda931d211e7b18fb824

SHA1
6f7ff4b849d743ca17926de7f72e20c08fff8337

SHA256
c10a21dccc21a3368c563ce2b37c8cc2f5a0539927e3c1a1198dcdd511ee06a8

SHA512
7c5e3dea88104073052454177be21b61b264dd0f17e699fa426914d25b772e235373858cb29c5c99e5fe96236f18d0bd2a71bdf6d9973a40be44e0ba50cad9d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2be7d57b131d26e75a0ec8a218e215d6

SHA1
57f7929d6227151cd18b1f0a73fe9d3c1d09e8b4

SHA256
c5e15b9656d5d5e8cb4b882e1c242e7da749e4845261f12c2ee1e1f1f4ca60a6

SHA512
c2cb6b150a43a864e5bf64a2c53b7f6f04156604bbdc7b3f491865a3acc46886bb9b7468f91445f37ef9910cec81681724fbc968aa3c31131b03605f9e0480c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9442eae08b8fac748cefecdec8964b47

SHA1
9e12d58c6ca9e0ccfcdbccc01dea9543371ff5aa

SHA256
81977140d849fc6c79add5cf6477b25439c51de713b5bd57e373e580158ce173

SHA512
59b9027e550a5ab19b15a06358a8f50cef63436807e5948ff0cc01c5a671a584b5c5277b832c2df990e02cf7b8eaf7c612d3a79496c51c89163491867a474764

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ba6ea45861f9742b6b417b65b1a1e686

SHA1
127cec4ff6e590650c3b9db16b3ce5270f95bb76

SHA256
10143a3259fd51b73e5793f37046bb4445fea96cb2ac1818199f3236e28f4172

SHA512
cc18e4a78ed77182002c2035b670d9ee884e9764cc638ae3d1996ea9a5f3138c5921374d930434a3eb474c3c99080c4fcae3fa625bd745d237085ab86df4394b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
65305210af726fe6d9411312b7ca360f

SHA1
9851f46d2102f3018ffd5d9d6f0061608f7e5163

SHA256
d72fc980b923c5ae0a59b945210b9d31091ab6dbca1666d01d052adfdad41298

SHA512
7e39371f2537d0d1335a4680e23f443ec4ea7fcfb185f4350eed97b358f9a557ec6b1a7fbaaaebf35603a1c6e121f1536bbc1f16f8c624358b133ba867b33e2e

Download Submit