ff6e6f1d2fb5a53903023ca950f962d123ce2879382b1e92b3df0ededcdbd680

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
27/05/2024, 11:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7911c12bf0dd5d480c26101740c6070e_JaffaCakes118.html
Size

56KB
MD5

7911c12bf0dd5d480c26101740c6070e
SHA1

9e92c03fa2ac09d6d78ca0deae62bfa07caa6a28
SHA256

ff6e6f1d2fb5a53903023ca950f962d123ce2879382b1e92b3df0ededcdbd680
SHA512

2a22ed4de78adabdf734e1694b770de1d85f7a40191eee289634dfdb222c86bd1ec754426c969b9966494eb5bf05b36bd72aeb650d3b906f8ee384572fc46188
SSDEEP

1536:pjFJmWJV76em+7MeemxE7gexG7VeB87weZ97teU07neCQ7tetz7/eg87teX97nev:f/5DxEgTngC0sIRa2k05SBaK

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2688	msedge.exe
2688	msedge.exe
3088	msedge.exe
3088	msedge.exe
2224	identity_helper.exe
2224	identity_helper.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3088 wrote to memory of 936	3088	msedge.exe	83
PID 3088 wrote to memory of 936	3088	msedge.exe	83
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 4664	3088	msedge.exe	84
PID 3088 wrote to memory of 2688	3088	msedge.exe	85
PID 3088 wrote to memory of 2688	3088	msedge.exe	85
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86
PID 3088 wrote to memory of 2040	3088	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7911c12bf0dd5d480c26101740c6070e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff956ee46f8,0x7ff956ee4708,0x7ff956ee4718
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,4926451479209476354,6702021472724250443,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6048 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5068

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1896

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:944

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
642B

MD5
8b71697d36bf9efc342c4acb28b008c3

SHA1
499984efda99665050348a80a7fb686870c41afa

SHA256
b4ba11d7300eb36d0e8eb13d62c50d1569daea2f86cc03287695b6befc2399e9

SHA512
c9bfdccac5a92363323022dfa616ab13d8bca412ea6133cfa749744470fd450ae6e9dd99fdb1a7bf4e32cc1058aa392535f8d69a8ddfbddcaf6af48f4d68b7c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
610B

MD5
1adc89b7120f4fdec94ba43cf5f9a6f1

SHA1
9f58ea676699d6a07b49927d5274817b60785636

SHA256
05bdad9733e89c1b7e68f802446620427391934bdc42e81d91cdc705833bb673

SHA512
ca1a50a477a976864a9a5f2e7b5c5c3c61941007fafd517c066b61dce1b840457dfbf7b80441329e36da284931d44a9bde2c132e4e36116b51af39d27ef28ba8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
fe283a696a4bcd03398156740fb07014

SHA1
3173feae95b60022bb4260ef2faa6341a8151416

SHA256
ab3727c18ba6f57e25a0015b892e22f5642488e1af5953f6b652419c4337e545

SHA512
fdb09ad9aa4d5eb317a85d1d8e79afd453362de2da8eeaa781889dc46e7825473f7d476dae374b4df824068fd8bdfb2cb764c1b763391ddae4480960e4c46aa1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
764290cd74f0f70ec66fd2a283ca4aad

SHA1
8ae26f4be25d9a625c032cb5c6f25781dfc5ab02

SHA256
680c7fba39a1b702512d2f5d5c77b8f53e7ea0ffe6e517c100ce56e24388f224

SHA512
8f9d959109019285d1e6b8278dd9da9d75b01939bc08f2d13c60ac9db4986dde540f35d5ef9b89e5cda3f28b5214551dbe599485c284e4d16cac72125a2c36ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
5fe13d86b56bb2d4e03c595297a9b55f

SHA1
95ba3894d996c747450e399dfe8e150f902c6b63

SHA256
a7c619b2a2dacfb5adc22a71fdb2663a06467c25274e915b527c84e9866cddf4

SHA512
04b6a216fa04f0b48f9ea735995aa7b84603d57791a386afc80e5fa849c6c0dec7231fdde12fb9c48a28f5527c4a2afc4050d96be6de5833f95a497e9186d0b7

Download Submit