1901f50ac1efc2df3972e36b5e1cbfde474ddfb2da4b715126825045015deb56

Analysis

max time kernel
145s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23/05/2024, 23:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6c9c0cdefaf89afa3ebd117235152cbd_JaffaCakes118.html
Size

110KB
MD5

6c9c0cdefaf89afa3ebd117235152cbd
SHA1

5df1060a3b2521deb6cf3b8923764ec0eb3ae4e3
SHA256

1901f50ac1efc2df3972e36b5e1cbfde474ddfb2da4b715126825045015deb56
SHA512

26ddaae2d2b5fef1351f137a5fcbacabba4e62b9e6fdffb4f221a5626dd471ff70907806c0320827264a4ea2165a67220e1380869701ef4c67749f549f407c91
SSDEEP

3072:UlUcjvG8rMdcXmNRSfQ+DE9s4FqNYqrl5/F9:CrXmNRGP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1572	msedge.exe
1572	msedge.exe
3208	msedge.exe
3208	msedge.exe
5084	identity_helper.exe
5084	identity_helper.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3208 wrote to memory of 2788	3208	msedge.exe	82
PID 3208 wrote to memory of 2788	3208	msedge.exe	82
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 3032	3208	msedge.exe	83
PID 3208 wrote to memory of 1572	3208	msedge.exe	84
PID 3208 wrote to memory of 1572	3208	msedge.exe	84
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85
PID 3208 wrote to memory of 3552	3208	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6c9c0cdefaf89afa3ebd117235152cbd_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff0aba46f8,0x7fff0aba4708,0x7fff0aba4718
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,16419288439129617260,4885776476352864962,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2204,16419288439129617260,4885776476352864962,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2204,16419288439129617260,4885776476352864962,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16419288439129617260,4885776476352864962,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16419288439129617260,4885776476352864962,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16419288439129617260,4885776476352864962,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2840 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,16419288439129617260,4885776476352864962,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,16419288439129617260,4885776476352864962,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16419288439129617260,4885776476352864962,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16419288439129617260,4885776476352864962,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16419288439129617260,4885776476352864962,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16419288439129617260,4885776476352864962,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,16419288439129617260,4885776476352864962,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5040 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4440

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2692

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4204

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
20KB

MD5
397383c90a2d930f866f405747e27466

SHA1
7bb6b5d6cee104c877dc5c3462f61232ffe5b360

SHA256
a67db01d19e15d8fa76e5a075e336e195325d79d277a83aadb6a440acf887c47

SHA512
4357eddc0581e3cd6209646540bf59756cb4035d7dba47d5cb6b0050e6c202bda65721d4e9d644f37e3cd105bc5fa240574cfa96649f01e2769b796b523e08aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
67b842dbca30f1c2be6c87ce87214160

SHA1
469421f034402417b1e5810bd3e290d44b568fae

SHA256
e9407071789b6fb233dd95979968f2286dec9752e14498ab2d8d6ea363b3fdba

SHA512
cd8c4f87b1918806fe5aaf7e39eb46ca1107aa8bf0662ca36868c94ee746f69926bc63c52ad1916099f7ee4d286f2f279b6b63c50512967bbef638f8646c98d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
959B

MD5
216d61502b01d793d1199802c7648f0c

SHA1
825102a263a63552f496f1197ae4d4344855bc51

SHA256
0e59238649a975fa9436728d06c57c0af7a9d2ecfd5b191c1377c7cb75ce40a3

SHA512
0f4fbd2ecc8eded3b98850a65cf70a62e3cf9d04c2882075f56c3524e350948bae87598e32b7a426d68cba43be79a7f86bfc6f8a7218eadbe7259a7ee1bd9922

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
77607473ff2e84e9151092fd563cede1

SHA1
2e41d3d1bdf43db05bacbba525611853ed194e84

SHA256
779219b7cedfb6dfae296805fcf00f1ff118e8bd1d7c40a11e0f44e5d417067b

SHA512
9205e6ea4fd6efce7945ae540ab69af27fbc3a8f787bd8705ca0f6ae646e7a22b2b92940e240eac84ecbffaa0e8e153159f81a81f1e8672b4e67540653259e3e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5c0c6f9c85bd096323857e61c60f0d89

SHA1
a05cd6c7ec8c64f144cc247332fd52b2a935a060

SHA256
825e7446741a84d7df7053df7bfa631f7e4c9d33930e35ad4ef2c27f5fc8905c

SHA512
5484d0a007d1f591d1b83369e00e09c2106daea74abec1a10fdf3a60e32d33148e69c73412ce9625bb34f35470702b2aeb21600f4ebc6809a04600beb866411b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0865cff373914e6b6c73bf8fad473394

SHA1
b1ac5fb4f0e06cff9cab4404d66eb647f04a56b4

SHA256
44e9e66d2f6e19a6d26e4439446d86e0e1c05a544f310b76a74355a8502946af

SHA512
65a5dcc643ac24e680ede8ba98d46241cdbe3eed1b8d697098a15e0ae005d69e81d06f218fdde15d9e1de30e5fdb89ce01168da9fa73997aaea062f40b44cf19

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a2d0faef082c4d37fbd88b4f9dfad6af

SHA1
f9c82c4da0871bde06ed6a8f1d84eb4e76a67755

SHA256
cf4de68e8044c296e7dcc29ce723a0362c0d35c9ec0497258ad910807e03d1a5

SHA512
f0e38870ccb1bfd52cb75bdde391f0a80e65e26140bb8e3930c3fb15b2239ef4001b529659bdb696d2558320324ba0dedc385cf41845f175f1ffef39c576ef26

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
cd0c6d4c4487756b87fbdb1236dc7eef

SHA1
43252bf1818cf733e480e9d7fc674348f117b178

SHA256
2aaedf0eda5fd9c4bc7bd8de751f3d01b4b5c94a283e0a1d2945030b339fad3c

SHA512
6f99475704bdb6dbfec28d678456a15c21a8a93ddba2013521a7cf67feca5f8c9b3809fd88fabf2558c4dc5f806f69f274341a5250a8a8ef9c580f632a6f021b

Download Submit