57b8d9ab462a7bdc8a87ee0368b93775762da97d46c520612d11b922b45d06ee

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
03/05/2024, 02:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0f79be2714a008873fb120766ce0e789_JaffaCakes118.html
Size

261KB
MD5

0f79be2714a008873fb120766ce0e789
SHA1

ab3488057792cfead8fcda416a856b8922f74fe0
SHA256

57b8d9ab462a7bdc8a87ee0368b93775762da97d46c520612d11b922b45d06ee
SHA512

fce431ed08b49ddca59f9626db069bd727e6bf46d8aecb1b54cd79b2d1d89dd2d6c20d760e72f5e82121ff9aece1f877ea937b169a2d67891f9a705d8020aedb
SSDEEP

1536:+OBHv7ynvCTSnjW6+DcDzPLHio2cZU312ZqxRs22kDYUvASin9h0vAXKMtGPU:TBHTGCTqj7ZSzYUvAtr0vAXKMtGPU

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1812	msedge.exe
1812	msedge.exe
4184	msedge.exe
4184	msedge.exe
3772	identity_helper.exe
3772	identity_helper.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4184 wrote to memory of 1276	4184	msedge.exe	83
PID 4184 wrote to memory of 1276	4184	msedge.exe	83
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 4432	4184	msedge.exe	84
PID 4184 wrote to memory of 1812	4184	msedge.exe	85
PID 4184 wrote to memory of 1812	4184	msedge.exe	85
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86
PID 4184 wrote to memory of 4920	4184	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0f79be2714a008873fb120766ce0e789_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdb2cd46f8,0x7ffdb2cd4708,0x7ffdb2cd4718
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6032 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6048 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2172,13055155702576165596,16513495735972795146,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5160 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2492

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4468

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4692

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
62c02dda2bf22d702a9b3a1c547c5f6a

SHA1
8f42966df96bd2e8c1f6b31b37c9a19beb6394d6

SHA256
cb8a0964605551ed5a0668c08ab888044bbd845c9225ffee5a28e0b847ede62b

SHA512
a7ce2c0946382188e1d8480cfb096b29bd0dcb260ccdc74167cc351160a1884d04d57a2517eb700b3eef30eaf4a01bfbf31858365b1e624d4b0960ffd0032fa9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
850f27f857369bf7fe83c613d2ec35cb

SHA1
7677a061c6fd2a030b44841bfb32da0abc1dbefb

SHA256
a7db700e067222e55e323a9ffc71a92f59829e81021e2607cec0d2ec6faf602a

SHA512
7b1efa002b7a1a23973bff0618fb4a82cd0c5193df55cd960c7516caa63509587fd8b36f3aea6db01ece368065865af6472365b820fadce720b64b561ab5f401

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9225a017-939d-48f1-a0b1-61b4dc4e4137.tmp

Filesize
6KB

MD5
37a1d32fbaaf395a508de65203302e63

SHA1
583340d492516403625b05b2e5fbed112211ec3d

SHA256
8c2dafced84a3dd7a7fc8a554361d61424617457d1a7372608cbc85ce87cb7c9

SHA512
d32434fd3bb3eca833aaf87a862a4bcf9174c69304e5cf90d3a8ea333d27258f32d0fc648b4da89a7989b424fc0d3d77004c3fcbe4f758e359d19963f0fa2542

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
4113f92dd92098a232dc086b96b45290

SHA1
796f76fce5bc98d0fbf0d8ee5b26a7aab41b90e7

SHA256
85948d8a48ec3816f48d16890a197bfd1c5dbab92ba06585db7894b6f3822a9a

SHA512
e2ac290bce3adadd0c538032e8ecb3cc58f82244541fde0b93140d81afba2b56310b4297690e347f328686b345c38359b9923bef1d65f87196afecf7b3bddd79

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
820B

MD5
fefb34d2bd59ce575036eba278013235

SHA1
740ad6fcdd83b0b0c025fccbbd7ee268214939ef

SHA256
68ffc8fdef7390f913afeff7a6915ce6d045d4c665e6d4307f3f6c21f913d5b3

SHA512
11395fe598b121c43ab35d264e99b3c1aaa2d72516dace084f271fc9d8da74f0c24cdc3fc7784daf6a6e0d663e83231367462ebc7be988d7db08c8545c03e7ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
820B

MD5
3d176fc7deba62a62eb107e58502dac4

SHA1
d842c679583815e089f828a7d9ea0e899903862b

SHA256
bbb244b8fb35e5ca8b8632d3cffb452ddf6ec94f0bd9cc81cc2b3a04ca546d70

SHA512
633891846c033738eba609ab63c86b35fcb70d7caa8b33001a08d57dbbd9a32e82df5918a0b349f302b03e96f098fd42c028b965a6aec70485d8d889cceaca53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
ceb95c76062692b94d37347744716635

SHA1
1575bb518e48112370168ad5cdc4840bb21912fe

SHA256
429538b4aae9d40d3f4563dc57c7b5c83a4c1b25a970c6f9e882b18ee9cc883e

SHA512
968671b34e30117ad87935739278ddc422e533f939708b21b69c1676bb12f3606554672aada4d1303bf1e027b21e9f8f0c2d24e8e1d3482eb938fb274ee3bd5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c65f798c51196b32e00c23f39a352ef7

SHA1
37e8b3a2ed5f0c89ac719097b2ef9fe8227c031b

SHA256
ca1c0f6160480d0ed6bf3ce6d1c01fd3ba7396b8be542db3793432ff52442451

SHA512
457454930307ac5229b8d01c53cb3610ec73db52821af24d8d8f9f526b898c71ff998501333c45c41d1d6935d232038bb80f5a5eedaf184d68885a41871970d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ebb4f8092b61daaef323b43a6a7147b1

SHA1
185384efce83ea792c1d34147b138be412afc632

SHA256
9a679fe347617a62ba566aac50d4291c96a91fadc85f960e6a19f983659a62dd

SHA512
2c4b5152533adad1581d7630c3a666f0f3890c6a7ed5cc3f29d12d382fa9b18dfe65e12af6895acd41b49170bd7b4ae5ab06320b15f8a6b0e63f494f8e99475a

Download Submit