97f06e8c4b095f00958d04eb22e022137d32f042849771a3713a10e9793085f1

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19/08/2024, 21:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

acba64236080b079d0d4e3229233fecf_JaffaCakes118.html
Size

5KB
MD5

acba64236080b079d0d4e3229233fecf
SHA1

a6a0b8d724c27e8c423d03594f604b6a947cd3f5
SHA256

97f06e8c4b095f00958d04eb22e022137d32f042849771a3713a10e9793085f1
SHA512

fe209f46eee791e1f51ca3d8f323227e78ea3d7d0eb6a2a896b2678430a93bcc3f76b125178c01001e735035b78faafd4cf6f6ba1811393bfdf246f050381915
SSDEEP

96:FODO2YJfZ1nSFdbawKJwRrxKDfn2fXgDRU/ihZZQK2OTJDfnh2Iln:FB7ZnSvaw3rFIpt

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4476	msedge.exe
4476	msedge.exe
3572	msedge.exe
3572	msedge.exe
3384	identity_helper.exe
3384	identity_helper.exe
208	msedge.exe
208	msedge.exe
208	msedge.exe
208	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3572 wrote to memory of 3980	3572	msedge.exe	84
PID 3572 wrote to memory of 3980	3572	msedge.exe	84
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4820	3572	msedge.exe	85
PID 3572 wrote to memory of 4476	3572	msedge.exe	86
PID 3572 wrote to memory of 4476	3572	msedge.exe	86
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87
PID 3572 wrote to memory of 5048	3572	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\acba64236080b079d0d4e3229233fecf_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa62ab46f8,0x7ffa62ab4708,0x7ffa62ab4718
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4248 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4248 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,4863048046266324545,987673417169946052,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5124 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:208

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1888

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4200

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
209KB

MD5
3e552d017d45f8fd93b94cfc86f842f2

SHA1
dbeebe83854328e2575ff67259e3fb6704b17a47

SHA256
27d9c4613df7a3c04da0b79c13217aa69992b441acb7e44bf2a7578ca87d97d6

SHA512
e616436f2f15615429c7c5c37de3990c3e86c5e1da7d75a0f524fc458b75d44a5be1a3648a628d63e1cf8aa062e08b538f2f2bc9c6a0b42157beb24f82c571d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
0268ee387a063f57d728aca155b89bb2

SHA1
94c2cbfb8a654a4f9b47a71cea15339ea0a42855

SHA256
cf3721e09127beeefc5fc7ee7c4506178c2206142d7c38e69a18a66710760acf

SHA512
64f1a3d6a6a12902d980281c1393949346f9a4d982cf84efd509485f45bfdc5e179a3be1d38dd0e6ba886b887488dce33597b1cbcd60a356e4bb1256b053cc34

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
818B

MD5
be6855085db972835ab3b1f23dcc7070

SHA1
7f006473c4df325962d0338f3993715feee732da

SHA256
a0f5e57e32067e37e089a42eb9ee0952cb177154db541a624782b9befa670fad

SHA512
268fb0bce4be7a00b18a48c996cc96a0725210ce326914adb1cfb959cfc5fadbe46adcbcfd559f153917d413b2df8de98525f6e083ac6b8b01e0f042005e4ebd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
dc87518cb90769ada48d7f809750a245

SHA1
30e139776a01c3f841124f8b7fb67614a8a04b22

SHA256
dd50b338be65b4b2489c80d386085d9e2b6d6665647eab94a093d5a5a3182e5a

SHA512
153722e81866b347a81c4141eab54440eef8b94d852d5f7e8982830ca609782c24340173df0e2295983c27ad5eb3f000bc6f79c9eb3cee59a4e64eeed28aa51d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a7b0310c8766fcd1fd21aae1d5e36f6c

SHA1
8252fe2812c024a7089241b884b85e3cd56e1b6a

SHA256
b535a63ef4611eeb043291ed8f3c87c29686290fd966a9ddc41bc1acc04e0daa

SHA512
7463faf6109206bb3cde5687005e1e4ad7e6406a7f6effba79a1843d30b206989592c25d78f4cbdb6dc2f2eec61ec701776160be06aee8cbb7ee7cbd734eb8ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
4ecbd869f52528724798dd0c093f81a6

SHA1
d37ab7ff514f9a0fff2a214569ca3230d7571608

SHA256
62c0175c47e39e9a0b88fe5dc6380f3e0f70e106a64c17918df73b147bd17570

SHA512
7ce1ec77aa2271a1773e58198a47c138e0ef00ff114dcd10cd96a38569fe340016d7b516943408ec8499aee0b82b1c881276861b98226e0fd35fb00c28ec9f86

Download Submit