4302e8ca0819d3441a4b1cb8c486caab7db8f3bcf7f29819e90169b0299548bb

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
29-05-2024 10:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

80796afccf2e93d6e50d6b1ac57bdf14_JaffaCakes118.html
Size

48KB
MD5

80796afccf2e93d6e50d6b1ac57bdf14
SHA1

cc0d1843b3150610d7c8e5eaaf2db6044013c800
SHA256

4302e8ca0819d3441a4b1cb8c486caab7db8f3bcf7f29819e90169b0299548bb
SHA512

19aeeca42672384678e42d4d98adf4d566a2445f107cfc954d177cc286e18804e0cd4cace38579eac7191ad5f3a448a51747f6a815159d57ed69dc1e02c0591a
SSDEEP

1536:SdYpaYT//GsnzNm9F18HRBYQsnzNm9F18HVAvvUnrOSplf+chpPXml5U/0icV7D8:SdYpaYT//Gsn4cBYQsn4NSplf+chpP2C

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3900	msedge.exe
3900	msedge.exe
2828	msedge.exe
2828	msedge.exe
2592	identity_helper.exe
2592	identity_helper.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2828 wrote to memory of 3788	2828	msedge.exe	84
PID 2828 wrote to memory of 3788	2828	msedge.exe	84
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3900	2828	msedge.exe	86
PID 2828 wrote to memory of 3900	2828	msedge.exe	86
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\80796afccf2e93d6e50d6b1ac57bdf14_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8c04046f8,0x7ff8c0404708,0x7ff8c0404718
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2704 /prefetch:8
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6048 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:1072

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5020

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3204

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
1a5693a2206aa5b5c4070d0af69eefeb

SHA1
1b7256f6de4c1131df19ec941ad343040f780e92

SHA256
f0058cac7cce7eeed610e6db933e73b0c66f76470325b78474b2d5b53ec94d02

SHA512
830f478a9e4905bb3e7ad6ed89eb8e0793ae6fa82ec73dda38e00e6c2fa5582b1e259f27fd0a2a73b6c71b181577cbf0f97524ac0c6c892976abdadc8ab9ba3e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
543B

MD5
e7f38f60dd6a72a9e522c4593eb6ec3f

SHA1
793ac4aa2aea2579429aa7a42935aaacf031cb7a

SHA256
f93021ae7f1072450f8852683c464b4ca1718aa93f8a39070318838beffdbf1c

SHA512
fa07c58008a7fd8503b1efa3d3feda473b408b0f815e7b20d6da1678b57b26591409cdf0f2abd8f21d6ecaab038f5f3cbeb9a7b8d69b54354e63ce0f7a210a7a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
cca2d1d73c1308547711a8e644a5a9c1

SHA1
f25dce8c53ff7b7aa766e1b5c6b4c32fb2197781

SHA256
da6c35c4d436117ef09de5c931849d4ff7af8b6fd1135b95bb4018a61b075661

SHA512
81554c74da12fd3d50d6f0ff77163df6cf681f40674e2cde97b1fbe59aefecff7885fec2b5e2180673fc43a82b0d8ecd87c9cb3654395471e40f8208edb2f6cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
df0e8bc5b4a5e0697f8b63a3f8580fdd

SHA1
19147d194fb571a01c629ee5060ad6b66edd9b70

SHA256
2a162c61a87b308b42a18f79264ced4a62ec7aefbf4efc82c506107f2cdc822f

SHA512
affde32de4fb19665aa9d906f202fc58e55b5deaf5f13e567424ec9c1fce0c0ca82a2c7212cfe62d3325d85e2137fd488693ae653c0a0461f223a6a9110494d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6603c28613e889a9c4ec25e6d4f6a8ba

SHA1
baddf72a7e18a0a27a003172260620f7a9b4537d

SHA256
8d2acbb3d8261433b7fd3094134c81d530fc978824c97bd22ae22a41e83c00c7

SHA512
5aa23f93013a91aa93a9c3618f37f04db8797ca37d84ef3c615a20dbd6a9b94e596afdc5150063fd7338b7fca2770a761a630f053b0f528ce5491ba504a488fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
aaa9bb341807967e0792933c9ae89d27

SHA1
49c0a5ad19c332d70b9b01b135b0ca9415abee82

SHA256
7234b12d8a043c4e0df8fbaa479dc689d5dc1999abd4c69d89a97b059abe9750

SHA512
5c7f3d5a47d0e8c4c02424c5416eab4775424f6e70259a44a64cfec569c79b746b52c5fac601904bb05e2876c916a7df4afc95cb64416e686c72acced709e89d

Download Submit