7965b3db097378ee4e28cba327ea7ce201a99d48e8ea0aecad494a27fc0efcfc

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
30-05-2024 00:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

82718b06c6743664aa57f268f66f54f3_JaffaCakes118.html
Size

76KB
MD5

82718b06c6743664aa57f268f66f54f3
SHA1

673d2c7d574a00aafcf4283071229bed238a5a7c
SHA256

7965b3db097378ee4e28cba327ea7ce201a99d48e8ea0aecad494a27fc0efcfc
SHA512

f1b1aa2d9dc890f23b2103956edb5add5f27295acf2cfd079810e1e91b479a6a3706dc0d539df309a2b898ff2c0d75d59d43c7bd7e58d2c48ee59e5a98853e16
SSDEEP

1536:PERcvL2RiWRCC2mEKZomV++rTmjIciMylPvZod9XV3IERJ64z7NAylOvl4Y21P67:x2RiWf2mEKZomV++rCCodtV3IOJ64nNK

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
624	msedge.exe
624	msedge.exe
1200	msedge.exe
1200	msedge.exe
884	identity_helper.exe
884	identity_helper.exe
812	msedge.exe
812	msedge.exe
812	msedge.exe
812	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1200 wrote to memory of 1396	1200	msedge.exe	81
PID 1200 wrote to memory of 1396	1200	msedge.exe	81
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 1368	1200	msedge.exe	82
PID 1200 wrote to memory of 624	1200	msedge.exe	83
PID 1200 wrote to memory of 624	1200	msedge.exe	83
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84
PID 1200 wrote to memory of 772	1200	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\82718b06c6743664aa57f268f66f54f3_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaf8b746f8,0x7ffaf8b74708,0x7ffaf8b74718
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2508 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3844 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5992 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,8995763450949204111,186952827771653300,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3536 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:812

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1728

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4876

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c9c4c494f8fba32d95ba2125f00586a3

SHA1
8a600205528aef7953144f1cf6f7a5115e3611de

SHA256
a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b

SHA512
9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dc6fc5e708279a3310fe55d9c44743d

SHA1
a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2

SHA256
a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8

SHA512
5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\66a6ba9b-f9ad-49d3-8630-1427ad45e5dc.tmp

Filesize
5KB

MD5
6f4ae918ba9de5dbdd60c5e38d1e00c5

SHA1
3e4f561e0b3832a383b2fb46830532766f7c5828

SHA256
4d6af73871eb3efa820f13cb8ac1e616c0118f199bf903cb2db8dbe1ea7a0967

SHA512
2b4a24a64774562f6fad8b399ebc1c25a8ca4e3335dcd62dc3dc5953e88315a19c6603f98aae6f75603ece92fcd976825e9f4b0e38a80e1607170126ee0a34f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
b05fbee6575006bf09e7fa818283fcbd

SHA1
41504bb0d77d8fa30fab28eeeaeba14e30389857

SHA256
bb514fc763aa2fdbdb983998302a793ca95996443d539409c5c2adbe13f113e3

SHA512
5ea5f5470e7b76dd966e96dcf973de60df7b0d57bf2b7b01aa6a8b5d4ec120e6d5266cda50ef4b690b54f3d9bd9354e33bec3291fb90beb2cc9dc6f53bd0cf0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
890B

MD5
1abdcf3e22c08db9ecabad9a1da423af

SHA1
6e4a65b061bf3b23f3bb74553e7672d90c771f5c

SHA256
76d649db1436f53c7f1a40fc0ad21c9fc0f0a7aca176cb3154f24573b2860e13

SHA512
155a7299bf881c77ad6e54561c2d018e3363a32424528ec1b3f253f1fcf852ab2cb599473b408ab02a6098bd4c5f21c510530e2b2d5c32fa385b533f72332a28

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
41b83445ddae910a4be4a96f5ac6069c

SHA1
f073c7d9c7b133f8c0e189f4f20ec414edf8021f

SHA256
ee2febb538d27362c5e5956e97cc12251bc3a583e8409b1297767eca3ac43b4c

SHA512
0312468e709b94304f064fb263894cb6ef744ef7cef46f25a1f226b535746f8a8d9b362f3b5739537ced027a2a903e3cf9ecf0d97f1d934f5ab4bd86c03d6f22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
836a10ef997219b230e0f0ca8dfffad5

SHA1
5e5be231b062044ba81166f6052e715271315b98

SHA256
3eb7aaf1d2602f6088a417e255bfa513b2ac965a558d675af10cbf594fb7e2bb

SHA512
70153e999327f5ffd08dd57ce95869d36c4b2055a613cdf6d6190b90ba6673ecf24858e2f589de47af51ae00a534187d61889035e870450569847683e656191a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
bbce466a80eac345b6f21af57ab4b823

SHA1
a6a3e1755d86254922953d5f3281b5234ae30c50

SHA256
f704273e5fec9871348e298b41306c7cef3a63ad1447d3799c0f3c101882f97f

SHA512
aaacdfe44d1c71161cfbe02d5a03611e54ae5f59fc49a1ddc42fb399eb663f4894ca5e60999771668cfc2f332d557d0a0115f54b1d8bc35763fb5ff436e587b4

Download Submit