cabba908a4f9e24a3b1a52eb4151538f5c8815c2d0bed1f51db8fc4c1b5fc711

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
04-07-2024 23:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2691807f2e08e0dee6e24a40999aadec_JaffaCakes118.html
Size

11KB
MD5

2691807f2e08e0dee6e24a40999aadec
SHA1

84af1d18edcadf47580bbb79b05df39c9afc1295
SHA256

cabba908a4f9e24a3b1a52eb4151538f5c8815c2d0bed1f51db8fc4c1b5fc711
SHA512

d7425f27c96a357e7bfc05086f38182c43228c562697155deb6b92f082b26b80c486bd920e0be21e70d74ec743e64098887896e76d8c3eb7dad71941ef352b47
SSDEEP

192:UhVqp+pvpVNoS94bVicjWj7qS40lx6lHaCSBP0JMJfJiJJ15JnZ563iGWvWVadki:Yu6zKMm0lIBBL

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3944	msedge.exe
3944	msedge.exe
2580	msedge.exe
2580	msedge.exe
4352	identity_helper.exe
4352	identity_helper.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2580 wrote to memory of 4940	2580	msedge.exe	81
PID 2580 wrote to memory of 4940	2580	msedge.exe	81
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 1552	2580	msedge.exe	82
PID 2580 wrote to memory of 3944	2580	msedge.exe	83
PID 2580 wrote to memory of 3944	2580	msedge.exe	83
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84
PID 2580 wrote to memory of 4216	2580	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2691807f2e08e0dee6e24a40999aadec_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc6b6b46f8,0x7ffc6b6b4708,0x7ffc6b6b4718
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2668 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3872 /prefetch:1
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1860 /prefetch:1
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,11715204069440848019,10825209570534303716,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5004 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2076

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4804

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3872

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
de1d175f3af722d1feb1c205f4e92d1e

SHA1
019cf8527a9b94bd0b35418bf7be8348be5a1c39

SHA256
1b99cae942ebf99c31795fa279d51b1a2379ca0af7b27bd3c58ea6c78a033924

SHA512
f0dcd08afd3c6a761cc1afa2846ec23fb5438d6127ebd535a754498debabd0b1ebd04858d1b98be92faf14b512f982b1f3dcbb702860e96877eb835f763f9734

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
06b496d28461d5c01fc81bc2be6a9978

SHA1
36e7a9d9c7a924d5bb448d68038c7fe5e6cbf5aa

SHA256
e4a2d1395627095b0fa55e977e527ccb5b71dff3cd2d138df498f50f9f5ab507

SHA512
6488a807c978d38d65010583c1e5582548ab8102ebd68ee827e603c9bdfcdbb9f98a488d31414a829409f6edca8bd2eb4aadd4ff31b144de41249fa63a26bc91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
3b7e3450f8702a4aa843cea541a090ed

SHA1
b9586546929958419817f1d4fb3e6290f79d5892

SHA256
5085e2e1b899595b1edb47a2d7f614d533fc40eddb11d615c20f1fc7f625ca01

SHA512
f9885112ce1dfe22ce38d96f0041c38e4b22b15a3ced3a968853d2f8bf4e8ab9e2a8c1d3ae8a70a79685d122b35427483a6ff9c215a9c89d2ab246c048247661

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
28890d480a1c3e921616e9b17d5dd381

SHA1
275d31632d0dc396cd6cb9934606ea0718c37956

SHA256
c5ef88bfb10d821cf3760cab914dc6935cda2cecc401ad3f360d3c831e351815

SHA512
72912a977b6a522e374b5961196eaead9afc951f03e548329e41b01d85cc9af573ab712a55d3d29c0cbea2d52a5d6da28df626145361c8b47360e1a46a1f5e61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
613B

MD5
e76298fadda4025d429d2b1ed2c1990e

SHA1
4ea79dc9f9c91f35a4ede45dca0996a65fbb37ac

SHA256
51158f83cc395eb817bd4f89bd0742852b67bd55d2c4d58b6a8b73c9bae0165e

SHA512
6d261180357c0b06ae20612fff1c234aca9a2fcfc0375721d31db8e41987b88a7f303a0561d6084feac9b7e681863ffbe04db8b0acce94522cdadbff09615e53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
52f490ed29a9419d9ee9de14859f6139

SHA1
a9cf830183e5f14f9e12920978c7703b99ebb6ff

SHA256
681eb5ccc20c5abd84a310ed29bdacd9abc876e59421bcbdac4a9d32552d7acb

SHA512
b4db813a9f32738ffea56755b35ef6f3461fd84532e9dc7f1c810750d574a376d395a4157a3277e6030691514821587bf3b1c16e86314005fbfda443668cfa53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5eff83e5ddacb9e5c2d16db942efa7b8

SHA1
a3c4d24a5bdfc32d826845aaddc9d891224c6814

SHA256
aa35ed282143745c29c3996550a1bcafefcb7e440315cfee804ab8e9a4af91f8

SHA512
3d5fddef4fc1663485bd75303a4b2f67d7880c17b9c0e00499049f4b51e323b392d1308c1d1420fcd31aa81b69ce13fe846e08b586e549a096de4b5b15daa95f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
78aa76f8008fac83605026b43cfe3051

SHA1
59f8b7d69145a605af09c35b398f65da3ab00fc0

SHA256
86dc205503023b56ffd4b8702f81244176926519272dbe5a3ec2d21daab8c159

SHA512
4c0410982a4921182e2ea28c7a606d2a0c9ebb4411eadce0b97f0e4183ef524590f1490525de38db65c5f0d0742f11a380c38fb3049a12ab80215d36bb813359

Download Submit