79361fed3203732b84338fe5eb2b37d690e7822ccfd309f0ff554bcfcc095f89

Analysis

max time kernel
145s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
31/05/2024, 00:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

85607d350aca108517f99cf2e5d8a619_JaffaCakes118.html
Size

61KB
MD5

85607d350aca108517f99cf2e5d8a619
SHA1

1c45af1121db65333fad85791c831991a436e5fe
SHA256

79361fed3203732b84338fe5eb2b37d690e7822ccfd309f0ff554bcfcc095f89
SHA512

f903d35289856586402b8abefd6f9cc17fb53ed78f27ff95b3d4d4f9dc94ed1e3eff83c5834c4d05a3becdf65550d0d2be396847fd17f227c51cbbc40a686570
SSDEEP

768:DRF9g6+30Fy5RXp51NUY4FaRZAmQyyCIwGi+1nH4m4qfYiynWtIN29Y+B:H+DHXp51KYJRayyCfM4m4sYiynWt/

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe
3040	msedge.exe
3040	msedge.exe
2756	identity_helper.exe
2756	identity_helper.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3040 wrote to memory of 1712	3040	msedge.exe	83
PID 3040 wrote to memory of 1712	3040	msedge.exe	83
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4680	3040	msedge.exe	84
PID 3040 wrote to memory of 4776	3040	msedge.exe	85
PID 3040 wrote to memory of 4776	3040	msedge.exe	85
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86
PID 3040 wrote to memory of 2236	3040	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\85607d350aca108517f99cf2e5d8a619_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa7bf346f8,0x7ffa7bf34708,0x7ffa7bf34718
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2636 /prefetch:8
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:796
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,13085648153481127028,1966485961970580810,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3960 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5656

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5088

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3096

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f61fa5143fe872d1d8f1e9f8dc6544f9

SHA1
df44bab94d7388fb38c63085ec4db80cfc5eb009

SHA256
284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64

SHA512
971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
87f7abeb82600e1e640b843ad50fe0a1

SHA1
045bbada3f23fc59941bf7d0210fb160cb78ae87

SHA256
b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262

SHA512
ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
ef1cf8f612d5b8673ee2c6d62780ee80

SHA1
ba748bdb28c85f0d98c1030c03ebfd266f0646a4

SHA256
d7d3b9d74b73df851f01d46c0c3d89a67ff333a2742c80cdc1a0a6549afafc3f

SHA512
98e685b44a20af9e5759891c34535eea66f606cbff40c97714e34eb2f4e2cd10b39c02ab90642943b666128bd7ee4d32d955fee8009646d1c79dbff0d41f23cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
ca17eef8d228a090f725a7f29c61cf06

SHA1
ae02202580aaf33dcb68f31bbec3f0857e8f4fb6

SHA256
146d9608f1a48593627998b07786058e20c1ad27d016f7186d7144ac3ea14cc4

SHA512
1cdbf2577fb983715e8f0062f9f504525db216f75c744a505c605e58bea290a094549f68f65bbab8e4aecd77d9ec1121b4e1897ab0f1c369096e4ba752d4d0ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
954e7db412d2d8cad669022ce70eb336

SHA1
2b9827be53d3de530ff1dd78b2ea8e531df6a2c1

SHA256
5d7768d15b50d86c701f3640d11a2326ff9e641e456684287cbc6d35e5ce81a8

SHA512
53928dddc438ee6c572cfc7faac4b17b82b29dfec11acd156c06e752b212de9fefd56400c21f8e959469e190b3596285f57609ed972a6b02af9cf534516812b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
df03108b9637b530bf627d0b4ea64ec5

SHA1
6507b5bfaa345811bda1d90aed859b3593156558

SHA256
c6622a77dc75ba6b81b510abb11aa7e3a149949ae1b1b15920a995cbe85abde9

SHA512
a624a1a4b6acaa03040f18dfd2324a8710bc0e9ad41eab684db8997b4a7397c51916b159b20001af552ceedb27136fe2854d2230136a0ed79d9550f5e4e85da7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
369B

MD5
80fcf59b8a05e04ed3bc587c90366237

SHA1
c650b03cc34decaaae5e96a927f59c6bd4b91029

SHA256
2dccf9e1caf1311f8721ee024fda7b93adb4d9e8956e69d0ff983158e9857a03

SHA512
e57687d8ab6a9e5f723eafad169c59bc35d1a0435da57a9f322d3e07d598cdd3b243474696267dcc4a2a092cf9999f406eab112cc7431a1e50980e0c8e9d2403

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57d205.TMP

Filesize
201B

MD5
dbea9fe39be6266bcb7b924a9f66d704

SHA1
16ac67cf8b20af0440902fcfcb53b310458e17a8

SHA256
c86dfce690c302ce1c8f513baf54d27708f0144685952836fbf51095540e02e8

SHA512
362670d9949ad76e22920328bcf65725f0b6ba97fc61939224ae3f6250cf5afa78de7fcabf936d8394272ca7cf03a0d67a208f0367f6894840fc9ff70c33dff9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
b17a5cd5a20cd48788c7cf4e8f3a0d18

SHA1
760db68c1a881253244f2054245b19db6c20a368

SHA256
c36b46b87bc07bc794ded4c2ed73f72e4788b9f75affb622f661d090ae27a91e

SHA512
1747a5980176f4dc2c599f89fdbd59729e7e1cfc77e452ab9f7ed7fdc30b44dc1ffa0fed83f8d8f5bf9fa275a0167e41519b868277b4a60104f7a97d9e959d58

Download Submit