46952059b7ee3ef465700d05280a62fb45f5743d5a153200b3b3639c6d64570c

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/07/2024, 22:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

239c6791cfa0d76ad4cc2536d55d4f5e_JaffaCakes118.html
Size

57KB
MD5

239c6791cfa0d76ad4cc2536d55d4f5e
SHA1

b25bfef7aa550d4937e37825ea47fbd4336d2c1b
SHA256

46952059b7ee3ef465700d05280a62fb45f5743d5a153200b3b3639c6d64570c
SHA512

9e82aff1c28d4a2563f3e1bfe9088155362b5817660637582daf7845482a71838e5069753d236176c6ca072780bd109c82213d3c2f7bf2fdf9333c65549c9f19
SSDEEP

1536:gQZBCCOdN0IxCPR3lfqfufxfSfSf5fBftfUfbf3ftfXfZfOfIf9fJfbfdf7fdfSV:gk2r0IxCSWZaKhJFMDvV/RWgFBz1D1qV

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2596	msedge.exe
2596	msedge.exe
3996	msedge.exe
3996	msedge.exe
1072	identity_helper.exe
1072	identity_helper.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3996 wrote to memory of 4564	3996	msedge.exe	80
PID 3996 wrote to memory of 4564	3996	msedge.exe	80
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 692	3996	msedge.exe	81
PID 3996 wrote to memory of 2596	3996	msedge.exe	82
PID 3996 wrote to memory of 2596	3996	msedge.exe	82
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83
PID 3996 wrote to memory of 4712	3996	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\239c6791cfa0d76ad4cc2536d55d4f5e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaa37e46f8,0x7ffaa37e4708,0x7ffaa37e4718
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5540 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5540 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1952,2858373017764977600,854615486181738744,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3228 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1876

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4392

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4776

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
259c2218321eae56a755d7140f33da02

SHA1
a7d3ce7e2f37b2c04c366793e5409e864aca9da0

SHA256
4ed19a0d949ac261f3f1f4a5160dc0bc9792a8b28f36f63ce92551a0e13f48b5

SHA512
8e6958ed7869982aa37005318c6255141cad42386890f69fb7ebdb9f79d29f902983968a21bda75f021ee9f40980b88af20d8483ed359531bbebdf8eeafa688b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4104230c748f7f2a74c1115993ad5213

SHA1
1f1824ed656c111ca947aa956b9b4ce0c163b858

SHA256
742d03878dee7383be86629fc9a56a91ba94bcefbb31bc5673b8c1c409a4b6e7

SHA512
08c9bcdbb1a1100c4cff25a87cc180cdf43c236b5d7d1c05f0e8cb24ca9f61996edd0421b1f6c2e9d3c266e5f2a98b626b9d1db9c0e543fdb93009d6246f586f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
2a9907c672f8d985c2e780563fa3c22a

SHA1
519789f9307913d79f3991970dff21662786b215

SHA256
c4fc8296fad15f1321553623b991cca44f13e88cf987aaa12171261e3a3c09e8

SHA512
8d06491f2a28978e0f47d3fff73c6dc6aa1e268888e4e416e05a3a9830fd646b4652c38955bcf7c7151fc826f95244ad7f264f4948ab2512b5140c5e04864ae3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e2e5ecfc694db2a84a49ad28c85a5330

SHA1
c96080de0b1aace746bb4a701d9b75d67ed5d964

SHA256
cc0bc98de47db55ae46ace3d084839c557554e36fe0fba6298eca7122db2e964

SHA512
3821ee4e29f8a9f795c3e5511356cbe0419b678388bf09b29467bcee75df5f80df0d7ecb21b1fd327f7d44c4f29d4bd0699b2253b09387c49d09d0341785c997

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
5e4f6b96af4f11e417b0f5039a27e791

SHA1
d20ec6cefe2e4e3e666411573cccc0e11441cede

SHA256
3cb8b2e2c7a83c13300829d7a68025738ecb66a68025f546b7a8a9efcac7a7bd

SHA512
80686cdfaf2bd78c972fc9f9e470edf3935a245bc7aeae1d6560ec1c13a34b1b0de43a0d061a50af451a3003adf15f67826643b6186e17d00fb1cbdd09b42df5

Download Submit