c469461ce4fec3aaf04089415c34336bb0505356c651a2e8eee243357c8062d4

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 12:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3066616f549af748a88e6c8a09465642_JaffaCakes118.html
Size

91KB
MD5

3066616f549af748a88e6c8a09465642
SHA1

1c567d5eade7c30b13ec35ab118bf26c2ff57965
SHA256

c469461ce4fec3aaf04089415c34336bb0505356c651a2e8eee243357c8062d4
SHA512

a01cd760d74c2f58fc1b3f65a61a4febba305960ae9d9771e345797cd420612adfa85bc2e4bdd3a5f58e4d2911399267a410e99c996645905e7c2748da127c65
SSDEEP

1536:gQZBCCOdo0IxCNFYAv32KSQ5hp4f7EnbvQ5l8eqykOOVZzjmGUmflNyVDm1B3pDy:gk2m0IxFPd

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4960	msedge.exe
4960	msedge.exe
4032	identity_helper.exe
4032	identity_helper.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4960 wrote to memory of 2824	4960	msedge.exe	82
PID 4960 wrote to memory of 2824	4960	msedge.exe	82
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 2836	4960	msedge.exe	83
PID 4960 wrote to memory of 4952	4960	msedge.exe	84
PID 4960 wrote to memory of 4952	4960	msedge.exe	84
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85
PID 4960 wrote to memory of 2968	4960	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3066616f549af748a88e6c8a09465642_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc280046f8,0x7ffc28004708,0x7ffc28004718
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2916 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4084 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,1353806432453456049,8639103449569162721,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5368 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1696

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:212

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4160

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
210676dde5c0bd984dc057e2333e1075

SHA1
2d2f8c14ee48a2580f852db7ac605f81b5b1399a

SHA256
2a89d71b4ddd34734b16d91ebd8ea68b760f321baccdd4963f91b8d3507a3fb5

SHA512
aeb81804cac5b17a5d1e55327f62df7645e9bbbfa8cad1401e7382628341a939b7aedc749b2412c06174a9e3fcdd5248d6df9b5d3f56c53232d17e59277ab017

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f4e6521c03f1bc16d91d99c059cc5424

SHA1
043665051c486192a6eefe6d0632cf34ae8e89ad

SHA256
7759c346539367b2f80e78abca170f09731caa169e3462f11eda84c3f1ca63d1

SHA512
0bb4f628da6d715910161439685052409be54435e192cb4105191472bb14a33724592df24686d1655e9ba9572bd3dff8f46e211c0310e16bfe2ac949c49fbc5e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
4548e17c2de435bb7c97d6cc4343a442

SHA1
f338837f412ad52334208f7c00db4db829e74d9f

SHA256
bac09428aff7bc0165125a429a8ba918a9dc5fd9c0d13a6f275299dcd79606e4

SHA512
59a740c8030ebd1a8fa35236fa1b64fdff70696a0769b0ebec2381896796fb878c4623236f50c22b2501b9acb24618dc73dcaadc6b7dfca800dd5318a6c2eec8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
e5435a28f3a63dc06ae005b4ef354005

SHA1
86d04b55ae3c5bec91e47e9faf9bf716963f3726

SHA256
dc53f2bd7c76f4ccdea1e7a0c55270bb975fa85628240c71e82d3676c23dc6ca

SHA512
a6ee5f9a2cf56c641b837950bb21effcb2c870e05109110e228fb75627cbad0fe2db79df4415a9a547f6cbf746e84b77abe6551397373bce84a7c7cf3d3a8577

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0eb4b5f32386f102282e6a870322a404

SHA1
595f61ebcaaa9692b335a5178e06d26dc74e7d33

SHA256
9778d60b2136a1fda304a9e5b077088bde86508541922c695a7c1c3d15ae9114

SHA512
d504232ee9ff16e13a79782cb50dbb8122172ab19bc6f930e939b564d179dff7ff5da9518316628b99c1ea6efc58b18892c8bd76f013357b8d592bc1f10e84de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
00450da42873ad090ad117d22bb95173

SHA1
ac24e3bb198dbcb7769e0351a368ea0e278e1e89

SHA256
d81d80ae6c1351ec8d87486a2cf50867a8a848d40a37b3321c418bbe8a414500

SHA512
2e13d247222a8d5d3a09b0e9ebee12ad2b685b144a9c4c54a836ba5b50e7dbc9b6ac4d0f726767a1b4d15ac2cba26c0b94dca32d9848523d628d77150e8f82c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
da2e6599073caebbfb6109917eff022a

SHA1
ede9cb60c52000c6e95f5b52465d01ea72e795d3

SHA256
f7b13b5015cb80c6b1735ded629d9b295a756e69a4080a1018d531c499a301a8

SHA512
c6b1ebdc9dc8fc085a174bfbc8395ac2bca124ae6a8fc48ce31a02c43b0dc06b0421e6eb0103895c2bc55ce2fc9dc200165d3de46a0843b8af3af33144da1fb9

Download Submit