4b88ba3059638fddf43aa7e3f3149db604edf4099ea25f6ecdc8facbe4406445

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
20-05-2024 12:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5f310eddb6bb37f85962dc11b8edf1ac_JaffaCakes118.html
Size

48KB
MD5

5f310eddb6bb37f85962dc11b8edf1ac
SHA1

c910d8da4a94839704c7bca8572b1e5f89ca1adc
SHA256

4b88ba3059638fddf43aa7e3f3149db604edf4099ea25f6ecdc8facbe4406445
SHA512

15f22e5660706e20d7fca120d63213405e808d12a9c8762e75598a1685245d7e186d8d92e9e5ab5182316f7d8206b137e4a61230869a70c0a55e71575cab5947
SSDEEP

768:V/Vt97Rycy2aWzkHa3Z3MB6BTSaemAELdjqckF8SC0/ZuOU:Ht97Rycy2TD3icZSaemAELdjqck0b

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
1316	msedge.exe
1316	msedge.exe
4456	identity_helper.exe
4456	identity_helper.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1316 wrote to memory of 2680	1316	msedge.exe	83
PID 1316 wrote to memory of 2680	1316	msedge.exe	83
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1404	1316	msedge.exe	84
PID 1316 wrote to memory of 1216	1316	msedge.exe	85
PID 1316 wrote to memory of 1216	1316	msedge.exe	85
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86
PID 1316 wrote to memory of 3160	1316	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\5f310eddb6bb37f85962dc11b8edf1ac_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9272c46f8,0x7ff9272c4708,0x7ff9272c4718
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,1773134216733999855,2854753985899703914,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,1773134216733999855,2854753985899703914,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,1773134216733999855,2854753985899703914,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,1773134216733999855,2854753985899703914,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,1773134216733999855,2854753985899703914,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,1773134216733999855,2854753985899703914,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,1773134216733999855,2854753985899703914,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,1773134216733999855,2854753985899703914,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,1773134216733999855,2854753985899703914,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,1773134216733999855,2854753985899703914,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5008 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,1773134216733999855,2854753985899703914,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4044 /prefetch:1
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,1773134216733999855,2854753985899703914,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,1773134216733999855,2854753985899703914,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4836 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3952

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2812

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4464

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
474B

MD5
c1cdfb1e33ae03edc1b8fff0043c2cb2

SHA1
d7245123f34e5c7638eb044acd930f6da36417f1

SHA256
521d23ee721f892fbfb72c9b59e05fd89d4f1f3810cdd14122bc29e6873b6029

SHA512
630b1058a7fb021a05fde7d81c49aa93c32402348e7fb1eac588bf53dce78f42ef5cb5e46ad91c9691e934fcd98c97fe2166f20b9f41656756297e9238070218

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
73001e4cfec98d4490577eef2b55ec36

SHA1
7c3431e835fd132be9de492a31ef08c410f09f68

SHA256
7cc4da83c476a68692cb3b8187e4252fd0d9dc55bbf147eea339bfa31fedc24e

SHA512
c445b09dc2ba73cf6a715f3c5152f8fbe975b2b60da7a92f227cb5d31f86bc001cfed049ece5e54eb9e3899b18fff3dec7d5af73013e1e94db0a59b25edacfc2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4ff06c2f73749a627e815a1f4752a932

SHA1
39a5be825a699fe0fb05b3dedbc5e61034f17706

SHA256
c37f6ad657a43fb82952bf0327b4a2ad00c7738bea683171226a6dc5c963d219

SHA512
eb4bf5466120a5773e5dd03ae195d6aaada044f776f3fc6e32cbd36b8deb4e29be1f52e04094b760c2fbf3734e1297671c0a81afe2924c8b34e87eb68d0609bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
180cb5147cfb9bbe8457380e5d2969f1

SHA1
4f16f9f2ea8238db4e1a13ca2235d4f5c1ffab04

SHA256
3f0217e387f4de1428266aaa1e73ba33ef284c8d992179405399f9be15c9152f

SHA512
d1480dc8fb11d904520d4b72e1fb7a882996db770d59767cf0a5053a667f30f6efd7e5b41a4fb09c8ca27ffad342b2ce1990aa3125346917c26f750e7498b349

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
371B

MD5
b6df27649dd389140c43b02bd264cf0f

SHA1
9694186806c576eedd505d3d9a7331d8b22ffc06

SHA256
ee2517058aa28e69f7099e1d12a036fa61914bea70960f6ccac9b489be426eb5

SHA512
f1b7e5d00065b8df25c42c360fabdef419b4ad8a345bc3fbb1ee2a3df522b0a717a91bff0f2f0c0d7a80369f8ea37b277ef44778f19a972928f8ebd360011a5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57d428.TMP

Filesize
371B

MD5
b0dd8029a226a3dda65e41e6a7707d5e

SHA1
6585d6b01ab85d3b7c40537fab5cd9b54777f27c

SHA256
2baf09ffc8bb0f16d01b21311dfa6844e69ae4f92fff66e0ae27e3c5957dcc84

SHA512
f55576a2a72786f2f56d3ccaef024abcb89a2987c8a2db77bdc9ff98c1764ee6b9abe3bcf4950ed868898d7fce2fbb2d854639156e86cc9fd8f65417f0853456

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
56074cb06a7ef30e544b02ed889d2bcb

SHA1
772793d3f6cbc031a543974a1aede87140a9be2c

SHA256
0c0365851ac9515f97ef65bd6b471577c54ac5738aeca04efb1fdbf26a8cbbb0

SHA512
c896869d401cf0f8cbb4bf756739f87841931b558649df8be1cff13a66ee912559dff671d66b13a786b3fd0bb0e95edeee7dc4bf83fb5b4deb1e8c35472778f5

Download Submit