15e67f1a6d1f262c35c68c7b75a5d0fa12024a1ac23d6e4ad608b5cd88178a1f

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 22:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7364660d59703894bc945ce283e5f2eb_JaffaCakes118.html
Size

28KB
MD5

7364660d59703894bc945ce283e5f2eb
SHA1

7128605e3fdb76b885f116503e5bd3e894978fbb
SHA256

15e67f1a6d1f262c35c68c7b75a5d0fa12024a1ac23d6e4ad608b5cd88178a1f
SHA512

2361cb8761802ea31ef0de2e957bb72abe4f95c6c0cdbc943f5e4f3056c44744a86a2c565541dcb5488e548d60e1a7ab245773b0d7eaed367bf663b0be58505c
SSDEEP

384:p+U9Uq4yK4vZyHS7nN9fgZdYFJ23eO86sCBuNRft3HHD6QTdxCIImrA8y0Bstw:phaq4yKaMHefgIFU1sXHD6sCUly0BsS

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1760	msedge.exe
1760	msedge.exe
3568	msedge.exe
3568	msedge.exe
4264	identity_helper.exe
4264	identity_helper.exe
1384	msedge.exe
1384	msedge.exe
1384	msedge.exe
1384	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3568 wrote to memory of 3188	3568	msedge.exe	83
PID 3568 wrote to memory of 3188	3568	msedge.exe	83
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 4356	3568	msedge.exe	84
PID 3568 wrote to memory of 1760	3568	msedge.exe	85
PID 3568 wrote to memory of 1760	3568	msedge.exe	85
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86
PID 3568 wrote to memory of 4032	3568	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7364660d59703894bc945ce283e5f2eb_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffa75c46f8,0x7fffa75c4708,0x7fffa75c4718
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,17326610075589077967,15775269356513312470,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,17326610075589077967,15775269356513312470,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,17326610075589077967,15775269356513312470,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,17326610075589077967,15775269356513312470,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,17326610075589077967,15775269356513312470,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,17326610075589077967,15775269356513312470,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,17326610075589077967,15775269356513312470,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1336 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,17326610075589077967,15775269356513312470,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1336 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,17326610075589077967,15775269356513312470,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5516 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,17326610075589077967,15775269356513312470,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,17326610075589077967,15775269356513312470,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,17326610075589077967,15775269356513312470,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,17326610075589077967,15775269356513312470,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5304 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1384

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1556

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4296

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
406B

MD5
b0476e096d257c1743c3c686d8260eae

SHA1
59208e48effba6aa63a30484d3103e3470634f9a

SHA256
9073b73e00b93b24cdb567c188cc04077febedbef54a2d604129f38fed6bc58c

SHA512
f4a8079f6a16d25a29e502dc67892a7e2d47e9ba68b3f645d5b2eab393d03c168dc2e35cb3f6e43d7c2a3e79f5267f886a32742edc1cfd6874caf240d230dbaf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f15ad686aeab592423eb3ff947abf2d8

SHA1
6390b7d422af1db1006e3b81f128ebd1cadd3661

SHA256
21eeb289ec73abe7e92d0a8cc7b90ee7f6ea65c4f3c340ea68c5782d3ddf7d7d

SHA512
66556d88a898b65b281b9b4ba4f895518235cd297df6b0c7ac9e9a28e20193468e9d0b9cc8eb5152aeaf13ece638332f5048db02e205029b96d6103b634c9927

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
d39296edc7120d44ab7632888404e1b3

SHA1
db39b4625a6ad4c90d6d5b8b21a43c3192ca5f0b

SHA256
659115bb320ed549a4e21cb4e4e4361d8b47de53d589c20f6d1963f25f460108

SHA512
b22488b6fb7912cac383aba86cb2f1c438f8b551f42aa5c1a662572d0a38858108c06f7b4a107208af4832cab07e3d191c1543c62fd549a828b4c73805232066

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4a6b10c3f0c057969b9a77f3fbdd893f

SHA1
158983393ee90fa3578949ba345aa7577732e2f6

SHA256
708bde95a4b7a4f581d78a14052615fbe69834d37d0a9de64196a050135fa169

SHA512
820147904443750dbd184611424bd71b0a1edc21d0243cc31c88eacd849697e0fa10c9bcddf4a30f6a91e1b69c2dfcd670521adea868c447ef863722a6078dd7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
d587e684bdef9d7a935b9c30eb9d8719

SHA1
34dc867f31220f8593ead18a69fb22fcfcf41351

SHA256
79405d84d534bc0124ddd2ae9ccca88ac594da686365314d8866cb5403b68dd8

SHA512
8cff7f828a34941d397334ce8f9109b09c576f6d314aa4f623348c2b857f170e2f8f243472880362cb5b26037e8e804443d618eb8020a246884f99b16982c951

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57d4c5.TMP

Filesize
203B

MD5
09f36ee792073cb5d536ff62b74df510

SHA1
0c85097d9d882ac3109b3569012ca80534e8b93d

SHA256
e6f6aa45546efc4b04cbf4437a15ed6c2979b905f6216d9263ca3c6627e7f0d3

SHA512
22dbc7612f34267c317663d778d9b1fba722b9adc48791c715b42f4f6a2f558bbeec0d8488111dc9d68e2771b118cb4322742b538f1528907b196ef3731d7d63

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
52200f5dc26aac481a14c1aa42b3e3e3

SHA1
156978545e53a323a08d02e2eaf0da88183cb472

SHA256
23ad0b5d192294af4c9097c6a76c6680422c4ebc81080f1ef764e7478ab884f1

SHA512
5992b7084b3536247fe014f5ebea73cad5bcbd2360f96a881a3b4a598ed7c932ac7c2423e807277bcf6504e7c6334705c1e13c5665a9bab85ba215bd4dafd276

Download Submit