6bcc6f9c8eea75f0a1ddd0672db6233c253a4ede49741c2fa5a705d6dc355cda

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
07/05/2024, 06:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1fadd152b5e3ce7684c311576bee06d3_JaffaCakes118.html
Size

77KB
MD5

1fadd152b5e3ce7684c311576bee06d3
SHA1

5584ab2b76f575b9a9c051c701301d39097441b2
SHA256

6bcc6f9c8eea75f0a1ddd0672db6233c253a4ede49741c2fa5a705d6dc355cda
SHA512

e93182ea241ea27af00e25c2352e96bd6675a4a74acb7e83e757b02f3910ec001b2861ba5ea3f223f9d15d105502226c1733287021f9d7ea146df47fc72ac01a
SSDEEP

1536:aj7DufqRGNjDGZ9oPzlyEwwwDRd6TqySGRDKxMooXIi/MGD8GN5y8K:e7DufqRGNjDGZm73/MGD8GN5yD

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2244	msedge.exe
2244	msedge.exe
460	msedge.exe
460	msedge.exe
4404	identity_helper.exe
4404	identity_helper.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 3912	2244	msedge.exe	83
PID 2244 wrote to memory of 3912	2244	msedge.exe	83
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 4820	2244	msedge.exe	84
PID 2244 wrote to memory of 460	2244	msedge.exe	85
PID 2244 wrote to memory of 460	2244	msedge.exe	85
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86
PID 2244 wrote to memory of 3108	2244	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\1fadd152b5e3ce7684c311576bee06d3_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdf95b46f8,0x7ffdf95b4708,0x7ffdf95b4718
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,16669742995230418929,11199375707089905576,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,16669742995230418929,11199375707089905576,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,16669742995230418929,11199375707089905576,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16669742995230418929,11199375707089905576,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2868 /prefetch:1
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16669742995230418929,11199375707089905576,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2880 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16669742995230418929,11199375707089905576,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1984 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,16669742995230418929,11199375707089905576,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,16669742995230418929,11199375707089905576,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16669742995230418929,11199375707089905576,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16669742995230418929,11199375707089905576,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5152 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16669742995230418929,11199375707089905576,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5008 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16669742995230418929,11199375707089905576,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,16669742995230418929,11199375707089905576,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5684 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1688

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3944

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4352

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4e96ed67859d0bafd47d805a71041f49

SHA1
7806c54ae29a6c8d01dcbc78e5525ddde321b16b

SHA256
bd13ddab4dc4bbf01ed50341953c9638f6d71faf92bc79fbfe93687432c2292d

SHA512
432201c3119779d91d13da55a26d4ff4ce4a9529e00b44ec1738029f92610d4e6e25c05694adf949c3e9c70fbbbbea723f63c29287906729f5e88a046a2edcb7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1cbd0e9a14155b7f5d4f542d09a83153

SHA1
27a442a921921d69743a8e4b76ff0b66016c4b76

SHA256
243d05d6af19bfe3e06b1f7507342ead88f9d87b84e239ad1d144e9e454b548c

SHA512
17e5217d5bf67571afb0e7ef30ac21c11ea6553f89457548d96ee4461011f641a7872a37257239fa5f25702f027afb85d5bd9faf2f2f183992b8879407e56a0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
749B

MD5
8a06b9e023f63ce6b9475789b01be271

SHA1
c6dbc4e6caf3c0d609b669fd2ac9eb8ffff3d1dd

SHA256
9b082d35f7091436f64a95e1f84633bc14a496ad410e5f0d08354cbdf51b6e82

SHA512
784e785dcd21da74e2048d0d3fb8a3fe82c6430e24a584a7f6dc1e80a021dddd65a25e404d52ef234f789ba54d525f493a2fa4cd7e6a664250d2a5b2a8097af2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
efd94545ce6147b5eea9cb68add26fa8

SHA1
dd4a56bf0d19f80918b752c24e4b360784552a96

SHA256
373fdd23a02d3df475f19fa583fcdbc3f6fd4feb1338fc989d40f79759abb427

SHA512
b172a0f7ea252f55084d34ff89674e41cb2e894208249d73fe144adaaf5f025ea8c3315619463aceb833a257b10323956702905620287d1852838105df6ab08a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1efac3cc61cf40e45668142020473824

SHA1
cc35916280f797b0c657e95156ef76192e02a42c

SHA256
06b0ccd75c5407b429de6f36f6d964f5bb55359ef651fe912e825793f8c294c0

SHA512
4d19d67513f1f58a96c96f8d93f7082dd9e0b39c4f5122214800062df08c7945a09cb4faab064015191e24a5991cf6e538c622b80a92e742eeeabf6c0990349c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d271d54817982b6d4ca3634a821c3a5c

SHA1
615750789544d9b0ac98f005c70595e5791d0d63

SHA256
7af1a2cd51ef422e408d9c61a99ec374b77fa15a42aac1215049a49fa5dbe6ba

SHA512
33266240e91dd540de7d57c4efcfdf5ff61615a88ba8f22f496c8a8f0c195f793135c1e43638ed176149b5f060764d0093d7527415eb6c8148fb893b334ecc0f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
14aad8dd8453a26c776e373c53015477

SHA1
0e0916864bbe93b79d52d89cb8c59d4d6ce1073c

SHA256
f9ad6d313931cb8baedc11357d4f045650d9f09a578fb084ec237cd257513a51

SHA512
3e22157fa9912126d5b7ecdc3f43462d4edc7800a5a839816af298e22997c8acbc2adf15884a43a020c02d78fb086a34ce284ff249830eaa44922b7747123b04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
370B

MD5
ab8552954370d8ffbac36ba0dfbd5861

SHA1
bb8de7eb6b74b5414e6d917cf84e43b6fda2a2b9

SHA256
fb5c3d5784ebcfbf619d77d9dfdd6707c32be86e045dd765b53f0dbf3c537a14

SHA512
61a196a380e6ac3d4f4417bc4e4cdbd29e5bcc9988bf2384049f738aa0b6a6e70b629ee807ee91fe2f7209d1a9983c6227ab328ed9b8862c6288be461bbe2924

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57b8d0.TMP

Filesize
203B

MD5
8f8c58be3e357d3c772afc79a0cdbde7

SHA1
5c5243f45cab632aef213bb59ff7b90222f7c739

SHA256
bbeda13364d9bfbacb972ce1bfd2201c973fb952a66aa62c2653b90573a863d3

SHA512
ca07472d072a5000a7f9f78a71c5b296a9b3d753e3996d633b5de99a281751d9efcc420a39036174f0494ace1c42a370e56b4b37a5d2d7182b3fa8c6e1c170e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
e52fcdf18e4d6ce1a00037ae80b0c4b0

SHA1
dcae5890fbc59d32d9106c7f210a5c794409c0d9

SHA256
1c2cc52461ecdb90f684d76141407c0cba13f58e6a5de118217db3395ab9e364

SHA512
b5466ac5208d68443f6b0d75e51ccb83d6156cfc0cd516a1b090567e48c14be11eab4670d0e1c12f9f125c47fdd281063d4c69d04b41b29e119a172f4b4f06eb

Download Submit