18923eeda34e9ae212063f4730929201a1ab951af4c7785717898e817138a81e

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
21/09/2024, 08:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ef64a5fb5244c61965c1cd4f246ee280_JaffaCakes118.html
Size

18KB
MD5

ef64a5fb5244c61965c1cd4f246ee280
SHA1

6050683a310524b82d2e52048455ae4265a62310
SHA256

18923eeda34e9ae212063f4730929201a1ab951af4c7785717898e817138a81e
SHA512

9604f4b4116093ad53d2f21b601f89e6f6ac1a13374be57b5e72a7f883f8b6b4e4111e6f841ed7a1abc19ff607b60a3a11453b90ca191729ff7c4c3b0f8de6eb
SSDEEP

384:ODcjhPAklnZsCvE6MaYfNwIwEyDnOI9bpfil1Ig12h4s2V:QcjhYklaBNiEKOI9b5AV2hs

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1588	msedge.exe
1588	msedge.exe
4336	msedge.exe
4336	msedge.exe
4576	identity_helper.exe
4576	identity_helper.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4336 wrote to memory of 3568	4336	msedge.exe	82
PID 4336 wrote to memory of 3568	4336	msedge.exe	82
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 2988	4336	msedge.exe	83
PID 4336 wrote to memory of 1588	4336	msedge.exe	84
PID 4336 wrote to memory of 1588	4336	msedge.exe	84
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85
PID 4336 wrote to memory of 1092	4336	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ef64a5fb5244c61965c1cd4f246ee280_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb757a46f8,0x7ffb757a4708,0x7ffb757a4718
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4036 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5748 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5764 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5560 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,4315197854569740730,9032126280752585688,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5080 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1060

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4332

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1924

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
53bc70ecb115bdbabe67620c416fe9b3

SHA1
af66ec51a13a59639eaf54d62ff3b4f092bb2fc1

SHA256
b36cad5c1f7bc7d07c7eaa2f3cad2959ddb5447d4d3adcb46eb6a99808e22771

SHA512
cad44933b94e17908c0eb8ac5feeb53d03a7720d97e7ccc8724a1ed3021a5bece09e1f9f3cec56ce0739176ebbbeb20729e650f8bca04e5060c986b75d8e4921

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e765f3d75e6b0e4a7119c8b14d47d8da

SHA1
cc9f7c7826c2e1a129e7d98884926076c3714fc0

SHA256
986443556d3878258b710d9d9efbf4f25f0d764c3f83dc54217f2b12a6eccd89

SHA512
a1872a849f27da78ebe9adb9beb260cb49ed5f4ca2d403f23379112bdfcd2482446a6708188100496e45db1517cdb43aba8bb93a75e605713c3f97cd716b1079

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
212KB

MD5
08ec57068db9971e917b9046f90d0e49

SHA1
28b80d73a861f88735d89e301fa98f2ae502e94b

SHA256
7a68efe41e5d8408eed6e9d91a7b7b965a3062e4e28eeffeefb8cdba6391f4d1

SHA512
b154142173145122bc49ddd7f9530149100f6f3c5fd2f2e7503b13f7b160147b8b876344f6faae5e8616208c51311633df4c578802ac5d34c005bb154e9057cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
69bec493224a32d1c9941ddf8bb48c98

SHA1
19e34ed27ef1ccd611370df0e57e8dd86c9deb9b

SHA256
2b04de7634847301967807d943aeb8c06c2f621b8066f8de4679a6ea9b0bf70a

SHA512
bcc5e0cdef7ed3ec1526df422c0b5a093df5017abd37ebd114132df0a3a89320a1ef4912ba9b31f597e70a4abc9c5103bed127dc2964e491130ae21adf7b4d96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
33735e52f264e1fcc472f4765fc4d065

SHA1
163582444c19311da97bc57b9e46c90bf20376d1

SHA256
0ec3234243c6a77da5f01eef87315413871552423508b4c53a79586948a46824

SHA512
1b54d94b65687cc7d0c3e7b3a0c6b9389cb1ac08d917bc217302e6b289227ae659a6fef00d7d581a28994896bcceb6777e6ec1578ecf0b871387b8bb51e3ac81

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
cebea2cb247ec096009ddc577732b7e3

SHA1
0860f9c92a244465838e04e5f6f647eec8e0f4dd

SHA256
c4bc7cdd6b5a5d9a9bfbdff634cae3e8fc109376bddf1078fb1347cfe15519ac

SHA512
e7bc8e2b7ce2d26ba6f88a8d69381f8b26a8df7caabddc6fe1d27819d0f541fdbcdde4bf5b757168d21925224f0ff66b13064ac2dcdd06cd001c59e9d4f38504

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
227e39941b7e7413910775565790caf6

SHA1
2bc3aa7f7e7a9acc2d24d2fef86331b1705e4aad

SHA256
f04bec3778f4313ff2c151944634ffc90dee1d74e59989da27362fa0d979be14

SHA512
4bbf011c354617e87be92703eb043384d37b48143378ecaba9eec8420115d53668a274f9f2727ec040eec41003b79484c441a12f726d96e76fa44026c23dd5b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
0620feec441697552e044e41a9360107

SHA1
39e4bdb9d785fd6e2aa63a7728ddca72dae8195b

SHA256
d55f82eb5162f077c865ff3fbdcd6038b4531788edf0e01cc32f96f854f623e6

SHA512
53c1ae1ccba181a050a9fd0a0964c0292a6d549d7a5a6b9199ecca421daa4d9ebb4bcab6214125599ecdfab6410064ed8e4e4a4b28796e8126f442ff571e702d

Download Submit