16bba71456d20f57dcb121d3109260d0c45510a0f0b1581ca8ccf93190ee20ae

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15/07/2024, 00:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

476d08df88ab46b26c46f2d3774c6729_JaffaCakes118.html
Size

58KB
MD5

476d08df88ab46b26c46f2d3774c6729
SHA1

3c6183e842392ead8a3ff4e336635cd7f3ed6944
SHA256

16bba71456d20f57dcb121d3109260d0c45510a0f0b1581ca8ccf93190ee20ae
SHA512

5889d54afdb075de7d1c6ea1e752e7d7e91e3eaff439e6f45496de121cad82b9a9a947f7636c79a4c1f62c3ec7de79182120d42b3c8d9bd31534dce5edeb935a
SSDEEP

1536:gQZBCCOdv0IxCZzSzfrfAf1TfSfmfRMf2frf9fFfTfpfufnfQf+fDfdfcfrfafyL:gk2J0Ix3jId6u5M+TlNrRWfIGLFkTyaL

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4020	msedge.exe
4020	msedge.exe
956	msedge.exe
956	msedge.exe
3632	identity_helper.exe
3632	identity_helper.exe
4784	msedge.exe
4784	msedge.exe
4784	msedge.exe
4784	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 956 wrote to memory of 4164	956	msedge.exe	83
PID 956 wrote to memory of 4164	956	msedge.exe	83
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4972	956	msedge.exe	85
PID 956 wrote to memory of 4020	956	msedge.exe	86
PID 956 wrote to memory of 4020	956	msedge.exe	86
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87
PID 956 wrote to memory of 4152	956	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\476d08df88ab46b26c46f2d3774c6729_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe023446f8,0x7ffe02344708,0x7ffe02344718
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2872 /prefetch:8
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4160 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6092 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6652 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6652 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6604 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,13079270525833012765,6589557987897376180,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3188 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4784

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1164

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2032

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c00b0d6e0f836dfa596c6df9d3b2f8f2

SHA1
69ad27d9b4502630728f98917f67307e9dd12a30

SHA256
578481cd359c669455e24983b13723c25584f58925b47283cb580019ef3142b1

SHA512
0e098ab5f5772fec17880e228a0dccbbaa06dc1af14e0fd827f361599c61899fe07d612a7f7b049ff6661d27fdc495566dd20fc28ceed022b87c212bf00be5da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
54f1b76300ce15e44e5cc1a3947f5ca9

SHA1
c978bfaa6ec6dae05464c6426eaa6cb3c3e2f3b7

SHA256
43dec5d87b7ee892a3d99cb61f772ba403882ac0772423f36034e84244c1ca24

SHA512
ac26e5676c675be329eb62b5d5a36a0e6014ab8a6366684b0fc2a59ae5f061f596f462b82eb4e9f135d2235a0cbd4af96680d234eecc873a8397fd81507d277a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
9e32b698f78bb87e58b9aa6bd2b491b2

SHA1
9b1d4543df7814b32786a1e1c46c2b42ecbb0042

SHA256
d50f786559da24167e114515d0e52c0a929fefaf75fdd5d0e0e0da2441d9ca8c

SHA512
2ded7caa46a2fa39286426d1c886e56f73cc487744ccb2478a227cc66937d758c9bd9b0b4720e07c795a012de6debeaf9917cddddc544b1c49c5cd161a81c2a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
113627d476147b4899d328d264f0ce99

SHA1
a6c6ce64bd7c1b323c2d19d98ffa7bd086f9b535

SHA256
0416825ab6dccb442cd0c6162129b4ca92644e51aaa854057e192ec8e38c99d8

SHA512
7f9caff1e527e21dd420a76b1b3da608e70e22b79c68c82e1c9b9b1e857a057ccd893f383055639bfd67058d9a46a754393bc66090b2e1c02a7cfb8aa1a571b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a3a14e7286ef298673f132e352ae5605

SHA1
80f411f6a37569d260b7b2381d81cb3c083e614e

SHA256
f35c8d603385a5ed94ce318382cf95ae4baccb2bf1d61ea03bf56f17887e25c2

SHA512
ac85fac297f33b3ea863bf57c836cb665d2a2fe175d736f85c28cf5175a644d5732209d3692b071a0c216393c1f6cb68b4bffa24aaab7c4fbc481d2bb9e5a539

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
83fecd8ebffb179fc89bc8ae9710b019

SHA1
1cdc482cf0bf8497183caf2972325afd630457f9

SHA256
be0475469022b8b9bc2f331976247801d87d683a32f259f16a394e05d554e44d

SHA512
e4917bd7ff393cf50a913654e6da50a5172b3afda3d816747efb84f06a9bc6962bd77d54a671e99fd5ba4f777193de1f03b48af815996bdff1dda0a8472e0766

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
7b10d6309f5145c112cc69b02c22adc6

SHA1
806d0e0b0a649d7a0fc435ae31a559614de5ef23

SHA256
8ea0293104c97d3186dbe8e02d85348ec9cde8c681e3759f557b2d8a610558e8

SHA512
51ea449689120f5680611a361a07797cfaf68629137983a9b1910a974c4dfb6be396eda760639aeaca89449b2dbffd7caba768c2804cdbd284e114a90a8b3a68

Download Submit