826c93bc44fd1179b5d11f622f0f47b1e88976285527302cc8e5a95b7467f274

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 19:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

31bdc4dd751f96bb51192542cd7cf6a1_JaffaCakes118.html
Size

58KB
MD5

31bdc4dd751f96bb51192542cd7cf6a1
SHA1

cd05993cb4911a1b569d45e56cc798a518e9aa07
SHA256

826c93bc44fd1179b5d11f622f0f47b1e88976285527302cc8e5a95b7467f274
SHA512

f879f467a84b13eb30244c7e719abf242c4a2ce7b4d709abf3070c2ca2c757f4a51a0b4770f0d461a9bd2b6cee40ca89d8bb37688faa0935b1f860fe60778e40
SSDEEP

1536:gQZBCCOdE0IxCQNzvf3fIfnfkfCfnfxfuafXfyf2fMfGfJfrfFfufufufPUfmfrn:gk2C0Ix5PAvM6PJrP6uUuRTdmm2nUOjn

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3828	msedge.exe
3828	msedge.exe
2420	msedge.exe
2420	msedge.exe
3320	identity_helper.exe
3320	identity_helper.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2420 wrote to memory of 2072	2420	msedge.exe	82
PID 2420 wrote to memory of 2072	2420	msedge.exe	82
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 4744	2420	msedge.exe	83
PID 2420 wrote to memory of 3828	2420	msedge.exe	84
PID 2420 wrote to memory of 3828	2420	msedge.exe	84
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85
PID 2420 wrote to memory of 724	2420	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\31bdc4dd751f96bb51192542cd7cf6a1_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff939d346f8,0x7ff939d34708,0x7ff939d34718
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2908 /prefetch:8
  2⤵
  PID:724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5012 /prefetch:1
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,1778501637655901066,6780226886161329853,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5020 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2404

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:216

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:964

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
210676dde5c0bd984dc057e2333e1075

SHA1
2d2f8c14ee48a2580f852db7ac605f81b5b1399a

SHA256
2a89d71b4ddd34734b16d91ebd8ea68b760f321baccdd4963f91b8d3507a3fb5

SHA512
aeb81804cac5b17a5d1e55327f62df7645e9bbbfa8cad1401e7382628341a939b7aedc749b2412c06174a9e3fcdd5248d6df9b5d3f56c53232d17e59277ab017

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f4e6521c03f1bc16d91d99c059cc5424

SHA1
043665051c486192a6eefe6d0632cf34ae8e89ad

SHA256
7759c346539367b2f80e78abca170f09731caa169e3462f11eda84c3f1ca63d1

SHA512
0bb4f628da6d715910161439685052409be54435e192cb4105191472bb14a33724592df24686d1655e9ba9572bd3dff8f46e211c0310e16bfe2ac949c49fbc5e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
f662bb01dc48659d54118b87c93be119

SHA1
d2b75e0a3f955b37f33d577d34df8011e8fe9fd4

SHA256
eceb4a871b5c349b3e7bd29d9519c8bef88c5192265a6f9829c701136532170d

SHA512
758ada100efc26b12a4e74e729dc44bdf1a2eeb8ad5d04140fe195895569ffa930f1b725d5d9113a2445db6cad18a5f3fd6b057458864dee92ee1a23e05dddb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
e47c7f3849deeb581f852220a7869699

SHA1
24dbbd3909f3961fb6e1970bc4298d15d3c8a4dd

SHA256
6b2d05ab4ca69f76d58b95949fd1c8b791114b52ba572903e755b9ebce839886

SHA512
321ec3dcf5b73c683224245b73f1b0f583069ec98227d5be776db2e623bb6d5293f314f452b79dbdf2530f3d21ef75963db6d3da7cb5e10632b0f50973dd293b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e177b8ba0213bbc460738ed3ed4377ff

SHA1
7afbcee19c70cd0ed2ab230088d64d943a9f428c

SHA256
0c551ab0b23a9a33f1f5aab685665701536a01e22d0f139d24957a560b80b7e4

SHA512
96ae3539442cb5ef9a7a6a4467ee12762a8e2fac108d820b9bb0af01be8a15974c0a142193af88506fa6070917e18e7397da9403e0b04a734dd39f0d10ff66a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7b507fce625cb90d4f9d535f98204a15

SHA1
9a7b7c8e1de2b6cc79fb1963150339c9421b7c44

SHA256
7b77fd191abe6a7c474ff114e3df7c756cb710ff2fa3c3cd553bc3a4309986fa

SHA512
592bf1a9b8f871944c92d61ecfd3020d16a580b643cf68a02415e13aca3acf697b496e20c8a358115c37f0e3dda598d6279bd0524d698df800f78b95bd8c4b16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
f2462562c2824392d33c72356f350a9c

SHA1
69d2ce62c936f8c911c2de14648c8b9ba88ef249

SHA256
307798d8de53ffbd6ad7880f17cfe278477874b5c1b6dba118d2802239c95536

SHA512
e482f7f14cf5ff9f34c1aab7f659b1e74605c8ef4aff0eb97171ef5f500feec516c028f200b10cd6d5e22ed1cdca825ee63ed727bf28da23014e5a60389ddbc8

Download Submit