7892a681cb4413769e206a637ec03994aacf2484cb07521bc1a2d9c51b140c4e

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
20-01-2025 09:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_e28ec5e370b0f6771fa008d9a6ed51a4.html
Size

20KB
MD5

e28ec5e370b0f6771fa008d9a6ed51a4
SHA1

274020f5f3234c3225ea4a3ea8c7b31f6e852061
SHA256

7892a681cb4413769e206a637ec03994aacf2484cb07521bc1a2d9c51b140c4e
SHA512

cc22d3cf61e498e3d28fcdd4e8aa2d3ff4041f6ff130ed46d38a3aea911c2c26dc4200a9a81683a96718ad62cfee26d171ffe969859df21ad7500057dbe2d8f4
SSDEEP

384:4+QfPFd9QZBC7mOdMECuKfpC5IgSnbmFe7Ac0h6n4H0Pd:Zcd9QZBC7mOdMEopC5I9nC4E0Pd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3652	msedge.exe
3652	msedge.exe
2416	msedge.exe
2416	msedge.exe
2556	identity_helper.exe
2556	identity_helper.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2416 wrote to memory of 1704	2416	msedge.exe	82
PID 2416 wrote to memory of 1704	2416	msedge.exe	82
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 1208	2416	msedge.exe	83
PID 2416 wrote to memory of 3652	2416	msedge.exe	84
PID 2416 wrote to memory of 3652	2416	msedge.exe	84
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85
PID 2416 wrote to memory of 2816	2416	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e28ec5e370b0f6771fa008d9a6ed51a4.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7fff764a46f8,0x7fff764a4708,0x7fff764a4718
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2904 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5320 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1836,8613768944736214463,10784151505537671546,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3904 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3012

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3924

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4604

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6960857d16aadfa79d36df8ebbf0e423

SHA1
e1db43bd478274366621a8c6497e270d46c6ed4f

SHA256
f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32

SHA512
6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f426165d1e5f7df1b7a3758c306cd4ae

SHA1
59ef728fbbb5c4197600f61daec48556fec651c1

SHA256
b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841

SHA512
8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
215KB

MD5
d474ec7f8d58a66420b6daa0893a4874

SHA1
4314642571493ba983748556d0e76ec6704da211

SHA256
553a19b6f44f125d9594c02231e4217e9d74d92b7065dc996d92f1e53f6bcb69

SHA512
344062d1be40db095abb7392b047b16f33ea3043158690cf66a2fa554aa2db79c4aa68de1308f1eddf6b9140b9ac5de70aad960b4e8e8b91f105213c4aace348

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
ead294469b02df50cce3ffac6fc5b7fe

SHA1
9581d14c5a37d66e33c2e08a228f4668b2f33102

SHA256
b61518a8e8021561c567360b19633b27ab46440c58caed0a39b43ff22a41b95c

SHA512
787f3731c93ed4d90cbdc9819e5a1f14ee4ed03bf6dae399edc2ee923d50d4cfe782463db66e7d5ba2bcb8bc85d4f1c3436e1233dd5e7d5860a54d872276db4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1e8e11ba3730732fb249e27deb876153

SHA1
0877e3746dabea593b897afbde8882fbf58462a7

SHA256
f71c641151bc02973ece2ce791eebe0d11672f13bf48aff0de4fd4c70ee4a012

SHA512
b436fab83e714b53e43b316f3e45bb319de47546e4c4e18aada31426bf2519c36073cfca7cb40c9a7c670223b6171356e5ced94ec1d5a9cc36b8994a488573e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
802d7ddb90d89284c5ca741966ef1207

SHA1
49551299156e8de68066df7c86aadb3b68d6740c

SHA256
187ec56e160002dd6ff6b9ff0b2f3e94820aa8ef345151645ebeac83c113f29c

SHA512
bfde3b61a0ffc913b3220a66055a450b5b127d6130d3faef94410b7ccbd7f801fcb524d41c332ae23bad19279ba5e8d30014d7a7953cad9ef815bb765a396ac8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
abf21fed54ba89467558fab704ffa103

SHA1
9474c327348cd084c7622fd6d0ab3bcbd5e618ea

SHA256
1eea0970df02dd1297b1bf5a00f889804e242cae7a4034b07e039f27272a06ec

SHA512
35f405183ccd82dcdb7cdc524a1ed45f5f6aae9cb982c2835c13bcb0f9a451e7d27bfaacb0ff66ad53264af9e977c45116dfd6a289f0afc5dd734b50cfa5926f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
204af7a32d091633804c30eeeb4b1756

SHA1
650169101884c00a938a74a2afcd5fdea8579c33

SHA256
283872f33a86608bfcd56a1110f260e3d2fea4213b31da6939e9546035b836cd

SHA512
37b9fe33203b529ad21b852f87830192c49627a274f729010ad3d5df4220854ba268cc6368dd8f5ec6654839cbcd648548760fe85befbfe21d7c8cfdd3f60740

Download Submit