2e642c15552cfb033a51b7b89a4d3e6e5de4661613e6b74a90f1027987017de7

Analysis

max time kernel
145s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12/07/2024, 09:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3ce73661b4683b14d2a0a0b9802d1765_JaffaCakes118.html
Size

57KB
MD5

3ce73661b4683b14d2a0a0b9802d1765
SHA1

039cfd9eacc86d5d9321be7e99939eae8d394914
SHA256

2e642c15552cfb033a51b7b89a4d3e6e5de4661613e6b74a90f1027987017de7
SHA512

60bac92cc335971c992904247d1f92d4a97694de99b41aa4fd028667e0e3b2eaf355ec26096c3196c5f284a4efd60f366a2d2ad0834310ea47669782b6c5e20c
SSDEEP

1536:ijEQvK8OPHdsAqo2vgyHJv0owbd6zKD6CDK2RVroP9wpDK2RVy:ijnOPHdsa2vgyHJutDK2RVroP9wpDK2m

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
5044	msedge.exe
5044	msedge.exe
1392	identity_helper.exe
1392	identity_helper.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe
5044	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5044 wrote to memory of 2444	5044	msedge.exe	83
PID 5044 wrote to memory of 2444	5044	msedge.exe	83
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 2692	5044	msedge.exe	84
PID 5044 wrote to memory of 1216	5044	msedge.exe	85
PID 5044 wrote to memory of 1216	5044	msedge.exe	85
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86
PID 5044 wrote to memory of 456	5044	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3ce73661b4683b14d2a0a0b9802d1765_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe22cf46f8,0x7ffe22cf4708,0x7ffe22cf4718
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2872 /prefetch:8
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6396 /prefetch:1
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1788,10816038513539218451,11168299793647951911,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5152 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1668

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1680

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4864

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8dc45b70cbe29a357e2c376a0c2b751b

SHA1
25d623cea817f86b8427db53b82340410c1489b2

SHA256
511cfb6bedbad2530b5cc5538b6ec2184fc4f85947ba4c8166d0bb9f5fe2703a

SHA512
3ce0f52675feb16d6e62aae1c50767da178b93bdae28bacf6df3a2f72b8cc75b09c5092d9065e0872e5d09fd9ffe0c6931d6ae1943ddb1927b85d60659ef866e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1790c766c15938258a4f9b984cf68312

SHA1
15c9827d278d28b23a8ea0389d42fa87e404359f

SHA256
2e3978bb58c701f3c6b05de9349b7334a194591bec7bcf73f53527dc0991dc63

SHA512
2682d9c60c9d67608cf140b6ca4958d890bcbc3c8a8e95fcc639d2a11bb0ec348ca55ae99a5840e1f50e5c5bcf3e27c97fc877582d869d98cc4ea3448315aafb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
768B

MD5
930b51a6c058c071f04aaa93bbdd678d

SHA1
09915150bb3672c1177f0474d10d1ea8f13d0c58

SHA256
01763cdf3e12357041902fc12e440884746dcb478e8621175b39d83462913492

SHA512
7cb156961a0a31538042e9b9574df18fcd029974efac0c7ee3fed9e3d1eaabfd6ece2f558e0e86d86f35d6a99b205db17c4ea29ea1ff485750d40eb5bda094a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
8c24408f4af45f7faea322dcd5825d3f

SHA1
3e9670e7cb579742007609c45ada68090628a7d5

SHA256
d9924dd0de205e5a7100e98bba98ed3ea3f32b54978a9afdbf92e0146e25e0c5

SHA512
f5dc4a12c43647925a318710a94b3736e88479c6e2d1d6b276193c20eac230e6a685e1c9f445cebfed31d7fa408c69ce37848c5f93071b459a3cc53a2bfc75d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
74413c3d4ade72952da11c8f3ed6aba4

SHA1
aa78a818bab38fdf334556a39ddb697daf67aef9

SHA256
f7585035226b136ff9c9424395ec28200cc01fc9b8d8f276638a85f0869613b9

SHA512
a6d42b25ac3a1c18347c5f38c8d666ee729ad9613f5d77fde5f13b89ecdcaf7e00442c434e512e0ec70a2f7766478cba7ee5692556c2bd4eeabbeff5b5d48762

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f8d0e5ffa42d8ceb1679b38db60e9e5a

SHA1
07ef55222f612f5185661023991330d42bc140ea

SHA256
660e73b0a0ddae0d25aa4f98c3b17db56d17157004f862016f778427c3378f2f

SHA512
5ddae4412183aee6a8e4364abaae2f7015fccd868ffee554d63bdbfb47ed2fd3771683d6c5a1023d65ead525b17bb703489b9a9f0f9096260d5e9d87912e13ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ba08c71294da55b9a548e9bfb947dc2a

SHA1
48b7acce23a2d11b3fc4f865ec1643236ff0160a

SHA256
47399199902bcf08d043713f1be602a0700d9091b28d5512aa936e2150225f65

SHA512
dc57bd470ed4dfb9dd9a579154b84cd132f612ae0fc6b04433e6ec0033d1e53ca07c013083616ad8a3c38ffc79719202c73ab5c514d37c4e2e39209a3bbeb562

Download Submit