99b210bf218576c6ad18c66576a1f344a7a73ad9a36cfc6d2a6b1a1f9dcdc1cb

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
15/05/2024, 08:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

454577b5ae2a1b0cffe5de543a50f01f_JaffaCakes118.html
Size

50KB
MD5

454577b5ae2a1b0cffe5de543a50f01f
SHA1

cd75287f0fa07c374b51909ae25891728c92ff3f
SHA256

99b210bf218576c6ad18c66576a1f344a7a73ad9a36cfc6d2a6b1a1f9dcdc1cb
SHA512

43f9e059a218749f102a4abe52ea2d5005078e73f226e06f06e40ea59076dac73efecce34d26cceb6e875289a7bc10a8ed8fe1ff630599e39f73283430ad5031
SSDEEP

768:ddT0EipBPY3odjhm/CrWM9aRVz9A4xTt4SJrg22donbKonh+VybtcQ:7TupBPY3odjhMEWM9aRhtR1Gy+I

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1116	msedge.exe
1116	msedge.exe
1848	msedge.exe
1848	msedge.exe
4716	identity_helper.exe
4716	identity_helper.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe
1848	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1848 wrote to memory of 2208	1848	msedge.exe	82
PID 1848 wrote to memory of 2208	1848	msedge.exe	82
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 4496	1848	msedge.exe	83
PID 1848 wrote to memory of 1116	1848	msedge.exe	84
PID 1848 wrote to memory of 1116	1848	msedge.exe	84
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85
PID 1848 wrote to memory of 716	1848	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\454577b5ae2a1b0cffe5de543a50f01f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd5eb246f8,0x7ffd5eb24708,0x7ffd5eb24718
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3176 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4604 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4100 /prefetch:1
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,5060809428703279976,5296705631976233627,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6308 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2872

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1756

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4656

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
8297b00f269845bbd8bb3e8f70d4366c

SHA1
b2090e0b7f41be4ed6aad430a416ea1a2af185bc

SHA256
d53d886949e9cb10476ac1754c5db07d84fc15006878d5a93b243079aa6b71c1

SHA512
4bb7adb45b20c004253d5b373b40902e142d87571849a1d07862b3c52e97e8dfd3528c2c0cf3b98cde338a52162f484dbb7e169bc09f0ee07059cce2ab90ee09

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
851B

MD5
a350291d068bf4aa630fae2d39557495

SHA1
e9c37820024588d69767f4addddb6c6cf832d3b4

SHA256
3dc71b33c15431c231b2d5eab4ea2acd9ed1238cae4a74ab892bd7c24df8662a

SHA512
a31be32365f17b9ad4594d820b63a9ff2c8ac5be0830e81dcde442d494be1cb12363d05d2e0a7c8a9623b98373011349d4470269b62266e02ff10183afd8a91d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6c5fe17c9bb7d366b81d73ee5e32bbec

SHA1
e3881f7fe55d9981a50bdc4f5a3619aa9d3737e2

SHA256
c2d09140e59718eec75f6f7e7b4fcb4bd646b15d5066999a83be5eabb886d5d7

SHA512
e9fd165e3b33a83570811c4bbb9d9cce545d33aefe88d3e5d54ece96c9d9786cd55ee43f666b348f1ab97d455f3738ce1fa602fb229c1b208306a68bd2157bab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2c16722ab726dd4fae77ab21d9dc1fd9

SHA1
baa54329b5044174050a61ecdbcde527067925f2

SHA256
10ce853b586a58d5ee9edbe17104b65b7cd62d41be068143d6250f12c88b48a2

SHA512
55552b7448c835dd29503949a112f1a58925d7e1d310c114861d9c7d15f21c996cba392d9adee560961dd9727c64470ceca298fc864d931a1880b9bef3cd3dfb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a9286362f20faf2e8c3c2e9fa6b27754

SHA1
44c5a9383d58afce20628b8fcd943f927952e05d

SHA256
86cdb611493b65b10b3b68971a6429668fdd551b6095690ebf61509232b89acf

SHA512
0f87e2eb940c7f833928b766c2c68df2d50275144e147f116b6aa14f703472dbce2f01f8073ead8764ca333a5f340fb1b9f3bedd34db1b29a375d251cbe1cdd2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
4c106c65ee51f241e241475f549b3f87

SHA1
9a6b75b392d44e061e4803c3437004a06243e374

SHA256
33bf3c3f1c09b4d15d4b3d2a357a8d9f75bff31761c20d2cd23d58bd8bfdc90b

SHA512
fdab9297762c66c5551fc79334cb7acc24df4162a84088a133652dc7f510485a950f802dd1fe710d06cb651bc2c61cad40385b8584a178ab25549a45fe14b3a1

Download Submit