d7e2b47f8db24608714c5523174c6599cea812ee5c8621b62c7739d6dae2d8c9

Analysis

max time kernel
143s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
05/05/2024, 02:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

15894939cdcb29b5bd804f0f97ef72a2_JaffaCakes118.html
Size

67KB
MD5

15894939cdcb29b5bd804f0f97ef72a2
SHA1

d6c527e6e6e0b0b7d6a3a812ef459ce6b6ea1088
SHA256

d7e2b47f8db24608714c5523174c6599cea812ee5c8621b62c7739d6dae2d8c9
SHA512

a0b4195f005a79b7e8fcd3e671f58a9ddea9fb7ec4506c1121d9c3efe17d4e42ff991844bb4c25b3eb16aff67da00612876a340ffd85f07ff257bdabff322487
SSDEEP

1536:Bo2nEV9QE3EjjpJVs6cproMhOf49+bBk/P5ItfMwccJrz7PACNfaqDJYHxnjccnd:BPEV9QE3OjpTslRhOf49+bKIt9ccJrnM

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1356	msedge.exe
1356	msedge.exe
4412	msedge.exe
4412	msedge.exe
5116	identity_helper.exe
5116	identity_helper.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4412 wrote to memory of 2752	4412	msedge.exe	83
PID 4412 wrote to memory of 2752	4412	msedge.exe	83
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 924	4412	msedge.exe	84
PID 4412 wrote to memory of 1356	4412	msedge.exe	85
PID 4412 wrote to memory of 1356	4412	msedge.exe	85
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86
PID 4412 wrote to memory of 4164	4412	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\15894939cdcb29b5bd804f0f97ef72a2_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9584f46f8,0x7ff9584f4708,0x7ff9584f4718
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,1272934619101779036,5107775457978782164,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,1272934619101779036,5107775457978782164,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,1272934619101779036,5107775457978782164,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,1272934619101779036,5107775457978782164,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,1272934619101779036,5107775457978782164,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,1272934619101779036,5107775457978782164,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,1272934619101779036,5107775457978782164,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,1272934619101779036,5107775457978782164,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4968 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,1272934619101779036,5107775457978782164,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,1272934619101779036,5107775457978782164,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,1272934619101779036,5107775457978782164,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,1272934619101779036,5107775457978782164,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3340 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4540

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4788

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3176

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1ac52e2503cc26baee4322f02f5b8d9c

SHA1
38e0cee911f5f2a24888a64780ffdf6fa72207c8

SHA256
f65058c6f1a745b37a64d4c97a8e8ee940210273130cec97a67f568088b5d4d4

SHA512
7670d606bc5197ecb7db3ddaecd6f74a80e6decae92b94e0e8145a7f463fa099058e89f9dfa1c45b9197c36e5e21994698186a2ec970bbdb0937fe28ca46a834

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b2a1398f937474c51a48b347387ee36a

SHA1
922a8567f09e68a04233e84e5919043034635949

SHA256
2dc0bf08246ddd5a32288c895d676017578d792349ca437b1b36e7b2f0ade6d6

SHA512
4a660c0549f7a850e07d8d36dab33121af02a7bd7e9b2f0137930b4c8cd89b6c5630e408f882684e6935dcb0d5cb5e01a854950eeda252a4881458cafcc7ef7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
313B

MD5
9d76f8c2135e9ffc55604f61e2a13a2d

SHA1
1bbc73c12f7ba80a15299c6e48f9109eb89e9194

SHA256
41e85504d85dd17435483508da0b07e1e1333b2bcc19e04f7ba7bb2cbbd0115c

SHA512
b559c1a176756205e423460d3406cf3b3ed13cdab5b872b86c8bf4f732af413b6c08e1b905dafb28f655fab02227696c4512cf77020138340675abaff7493e90

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
516B

MD5
ec7298f734dd2a80fba40f28eb983bd0

SHA1
1e0a7b20b759a2cabc1fc4d355cbe378ee478f23

SHA256
788dd733988039cbfd94f0b0176f965b1fbfa0b5671a4ce36d5cfa4aa0342bc7

SHA512
3c9311d4f6f6fb103e9291b673b8795bdc5451a1c58d518e62e963fd9bb0f4ac2f5b287c39ee22e0703c5cc6e5e1e5f51dba5e0038f3fb1709becb73ae735505

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
cc2ab39ed521cc96329d346a0fcf459d

SHA1
1073db19230cfa48555b3a4f860667a4b4d4e1a3

SHA256
82aa5ab8202161b806b20a81c5673bcec8f9dc25dbdd5967ea2806d615a3d7e1

SHA512
303ac193393daedee9f6c4a6e03c3c0fb5e8ff72f01b0ea6a32f854c4670488e0db1116d7099c240c9b7d7c784b04c3036f39bb3ef219c0b1208c1ca0d7fe289

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
18d4d6ec169dfddfa5bc1a9149da2470

SHA1
0daa0bf566540e1920142774008d1d32d43fad24

SHA256
f54743490d4137aa3c9a339d650667c1b0ce1d2c753a464076d4ee0f2d7f84bc

SHA512
aebcde0953a5d0c96afbf6b32f98f462f81e407d60008404ba3978550b39cf68bfc8ee77599a7f3014d40adb8eb342b031af369b89e6c0a79265b33dcc38da27

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
58aa2b4da6467e3152430769a7f414e9

SHA1
b34a5db6c9a7e108abd6976dafa4feed4a3b1530

SHA256
b08d078e711afe2d090b52d4d106a4e16dd6ae6237714c4aa12405573244843f

SHA512
d1ed9aac425df561b77202e23bc189545554f084927fe40581f5964b4889070eda46f16ff3dbce1418ce2b56834d41e11975e515456c8ccfc07440f936418009

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
370B

MD5
33a0287127e302f79a250ae16d8d25d9

SHA1
cd49fb42f0775a741053f143c9b4220e0d182070

SHA256
f353c8078584223a3b376772778f911d3c69963cb73b970ed53c00ac4b3af1d2

SHA512
e1ac51dd9a56b91815a2eebfcd20afd9dc7ba2b94c023fe79574f59fcf84cb32999f24be3fb61640216fc3071fe3f3b87cd5d95711e083351f342cfd5b359818

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe585109.TMP

Filesize
203B

MD5
e68c4ac206fad85c0b3dcb939726f9b2

SHA1
ea4815eb598d3d1a9d04cc4a5c96cec477c3d7ac

SHA256
bfcf5c481bd7f775212751fc3174895e1d2f0b90bac42ed7a20de0be0aca8c9e

SHA512
6f4b6fc157d2e8db17ac482e9e0d2b656fc74ff5fba83d4507a24361c564b210cfad73ab6a31d6728408f61c6ebeade8c7bb8d4a3068e8a58f7189462a86d0aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
13270c36a50dbd8576ebfa5e351cf15c

SHA1
c544fa7cb6015bd3949280ffc479b09254dd04f1

SHA256
967be99491219bb195f16fb0b56e95a2c03a31ca14af6a849b5d05587717e1fa

SHA512
5e83ed25de43804d8166f414431a7abedf66ab264471441a215c573de5b09b770ac90cacf214a3fcf190be68f5dc09059f3da3a2887d5694303eb4cd03cf4fd6

Download Submit