b40e3c14689269a1c5d9ff76bdfc75d30a9a70aa6ac482207d2836094d4248de

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
03-10-2024 15:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0f7995c1f63549c885a9b11064673e6c_JaffaCakes118.html
Size

62KB
MD5

0f7995c1f63549c885a9b11064673e6c
SHA1

f267d5ae1fef7568fc47a414fce45d89578250bc
SHA256

b40e3c14689269a1c5d9ff76bdfc75d30a9a70aa6ac482207d2836094d4248de
SHA512

5462fa5c8cdb1f9327d05e84ee0eb6b8674a33d060575c0a270dfbcedb9a77b72a013d4104ee88274fb4274bf1a5b581bc2fe22e82fbde3a7f893b27dfe094dd
SSDEEP

768:EzuZErkIf8n5xlYS/j399Oz9OdR2nkKB1hxk7S4wX:Ezugkt5xP/Z9y9N

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2888	msedge.exe
2888	msedge.exe
3420	msedge.exe
3420	msedge.exe
1400	identity_helper.exe
1400	identity_helper.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3420 wrote to memory of 4924	3420	msedge.exe	82
PID 3420 wrote to memory of 4924	3420	msedge.exe	82
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 4380	3420	msedge.exe	83
PID 3420 wrote to memory of 2888	3420	msedge.exe	84
PID 3420 wrote to memory of 2888	3420	msedge.exe	84
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85
PID 3420 wrote to memory of 3088	3420	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0f7995c1f63549c885a9b11064673e6c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdb12246f8,0x7ffdb1224708,0x7ffdb1224718
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:8
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6728 /prefetch:8
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6728 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6276 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6268 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,15615611978265439069,12029901478633938290,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6100

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4076

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3940

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
e8e17a22eb573a309e1f566bf52c668a

SHA1
8c97266f0ad4288c5733b6efc9510e63f1cf2223

SHA256
3a861180b4e70ab4ad4101698a95400ebbd3d44b27a0e5d7a07d07dbb37ad176

SHA512
cb7738d2fae0c6343dad594b7d00b2aa5a507da9d1e62086087eed09d595112a6d46464c2e54b24d78f1d1bc66ecfb4d7b639f5271c2783b6fae3850554aef7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
644B

MD5
41d2b31991a4ea29e59a9d4c84520cbf

SHA1
8445fed9b06cfb5a7f502a08ac6b1141b38911eb

SHA256
c51f7bd8f31e3cf1f54af981caa2212ece399d8f9fc18a9a1b932d51e63dd4e7

SHA512
eff24c19702695efd23f93d54e7939e6cf4abca6c9860c9b8dd6cbaa67e75c4e0b10d2a724f0f4ae04d4a149f18e1de99a924cfb3a0d3f6c29c845a70208b2cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
31efa357ec58dc93231358e425f09a0d

SHA1
61a624ed829fab51c0eb70ca8538f90f72a82de5

SHA256
1e1a96c9b5a7c2073503e17302fd2013ab5327513500f78f489c8305f873a3c2

SHA512
c71db7aa2493e0cf57c08ee17b9455ed04f2c430a76a7201c4197c14ebce5c62cf13722ac85a6712a148598d5d95fb65600ef56926c2aa65f2577dc1a7a166bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b4ff86744042df786920c9a28b2a8940

SHA1
bbea9e031e54650f39b0ca95e806f179f5e7ab92

SHA256
57b10165aebf9364812035393187826fb182394f10dde22465258ae917d2f317

SHA512
6d951428255195df07f4ceac9e9bfd4397ff711bf10e637dfbc6da2678895c45836c91035788b9b0b7fa789bfb4f0541792cffdce6ee442ec257cff0c3834a37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
ce3080e3ed4dfca700502c72e1a637d0

SHA1
ed44f9b44d4a9d67b800dbaf0a475f71fce7a8aa

SHA256
78ca6b71e3f7de79b2f8c1f5a98e4aea35f9d388bc96d04be05eb76fce92cf71

SHA512
67b559add3775d5082dd5c95364898d3766327775af45809a1393a840baee0e82527807a6d979380d328d1b0c9309437591eebcde900e27a35653826cd5a0455

Download Submit