760ff435407c3a7f7dae5b9855b2b09cca7a4923c51ebec127e57671467893a5

Analysis

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16-05-2024 13:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4b3b04fa2d640f25462e879074748ac7_JaffaCakes118.html
Size

154KB
MD5

4b3b04fa2d640f25462e879074748ac7
SHA1

90d6fd4df93d596e5c1098fd51a74f5703373fce
SHA256

760ff435407c3a7f7dae5b9855b2b09cca7a4923c51ebec127e57671467893a5
SHA512

07651b344fc16c751649a0fd92c829cc801ccbae7dc32bcbb96a71860450121aab6be1b1f2549d19805160ef89d96d3e8ca52869a8e346228e36f8559f0d74af
SSDEEP

3072:rbL/owZ+K7AeFw8RmWvmMJQINWLZOcehNxZ/ZxdDZxr72cfLZERY75jZJL4I6BZT:rbL/owZ+K7AeFw8RmWvmMJQINWLZOceg

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
4484	identity_helper.exe
4484	identity_helper.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1804 wrote to memory of 3916	1804	msedge.exe	83
PID 1804 wrote to memory of 3916	1804	msedge.exe	83
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 1400	1804	msedge.exe	84
PID 1804 wrote to memory of 3152	1804	msedge.exe	85
PID 1804 wrote to memory of 3152	1804	msedge.exe	85
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86
PID 1804 wrote to memory of 4108	1804	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\4b3b04fa2d640f25462e879074748ac7_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff850fe46f8,0x7ff850fe4708,0x7ff850fe4718
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,6793203715110907306,4055018504196107643,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2192,6793203715110907306,4055018504196107643,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2192,6793203715110907306,4055018504196107643,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2692 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,6793203715110907306,4055018504196107643,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,6793203715110907306,4055018504196107643,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,6793203715110907306,4055018504196107643,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,6793203715110907306,4055018504196107643,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,6793203715110907306,4055018504196107643,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,6793203715110907306,4055018504196107643,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,6793203715110907306,4055018504196107643,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,6793203715110907306,4055018504196107643,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4556 /prefetch:1
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,6793203715110907306,4055018504196107643,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,6793203715110907306,4055018504196107643,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4780 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4148

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2760

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4724

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
340b4ae13074b39c219cb6774f32749b

SHA1
59fe2b78d4aa4b4d0fa2953f8f41ca78f46eec5f

SHA256
2ffdf4a27e4a905b4123fb9797512ba58e8f163ee22d0b6e1188471afb62d204

SHA512
88769744586dc6b4a079e699cc982017d17670512d215955ff41122fca4d659954736bcf6256bee4760aa62b800dba7c2a1c4cbf2aea00eaed04435eee725f1b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
330B

MD5
abd35d7e7771a16ff429ce3fe39a6130

SHA1
7de048b08216655aa23e9c483b0515b000109cb6

SHA256
90479999a65c3cc81c3350b9e6bc4cbe5f31ff34f4b7bac99d8edbe34660d9cc

SHA512
2dc28f797465043a15490f1bfd366d20fc891e3c595a62c3bbee5eea7f66542b5a94f9df40384d82877c38cf5c293e2c446ae61164c30ae7742227953680a09b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1ec5e2e549b2e4d13e7c90d36f76acfc

SHA1
ffa39e7129471f668067ce17eb0858ff079ccce8

SHA256
d23e2117768489f2de511cefc2577dcda95b60150c9d280e359bd39f05fe40ae

SHA512
82f3f29aefa0325357430278f51a4ded5f94365c04cbbf2516fce7b5dc26057ccda9f6b73bdf658df43274e43dc5e85969c6dd5487ce624a09761f460c99c002

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
47d96c65e26e94c46d72b57e40677752

SHA1
b03cc7bd5cada132fcb49f8eaee4348ba4ac7a38

SHA256
36c16ad678da4ca32d20d8ac37cf1d4c12fd9b07fb5187b29029f54466f4f048

SHA512
414da0ca6aa69bf1bb4f849b91fc818d528b1bdde07d180912e4eea8d3f07056b5d8adf4e217d2ce6c4dc65fdd688d18722e6268bed9afd9e1ce45d9e0031569

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
372B

MD5
8aa13afbe228e7e170aa3f44126f2ea3

SHA1
5f70125e485607e6580d9b338c4159304ae105d8

SHA256
a180159ffbfae0ecc710cf7a1080e5566ba7bbca8c06d13996883f489ab72d4b

SHA512
8d1878023c38deb28b2ddd09feb633dfb60f7107acc567a5b572e2203a10a94c56f0d73a90431c0c61230699bc27f9eb6ccc15463aaf75490267419b5efb6863

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57a20c.TMP

Filesize
372B

MD5
b5b0913e9c9e052bd898c1b4c3ab96c9

SHA1
e80b3ff185d6a2579667363bb18b5d45ab6e4a6e

SHA256
c9d8a3fb6785d3f191ea97a58d467947693e6f140a102f67917d91427c955944

SHA512
2d3c85cfe9d390692557e4db769170cff606b6414b47aa8051822aee23d85b9c42f08c2190e29aff11d1b43e0b6a350699a5d0363dcad7a2d3980e2d3de127cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
a9c96647b74988c33c506655c2fb6f33

SHA1
7842982aacd05cd69305946e2956825586d0fbdb

SHA256
1f02df336ac4e44aa320682b305b5d84aa4b8a146c64d278f17f80ba582c6464

SHA512
2a64c24f1d8132f88690f321977679d053b49493f77019f9c68040508e50f5fdbbc96140a0ff3b36528111418cf092973ef25f0129ecb4145ed5f93e12620814

Download Submit