7eed918fc145bfe7fa563389c933d83a7d01d7f0422378155a203cc334455ae5

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
23-08-2024 09:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bb1f46238364de5b0831904f81337719_JaffaCakes118.html
Size

63KB
MD5

bb1f46238364de5b0831904f81337719
SHA1

88aa514d047aae21a40d3fc85eb86e4b7c5b3c13
SHA256

7eed918fc145bfe7fa563389c933d83a7d01d7f0422378155a203cc334455ae5
SHA512

c5d6e5d9040eeda334bc1bf06636453353be883fbf53852c99b7fa241d2246735db7ab372bc80bb951588130e782523e3703c5e4ca8874aa4f4b426d30ff551f
SSDEEP

1536:PuVVjQb8nVlqbtiBeVUDDkUBeVUDDkqJyGZPu8LoG:YGt8YGZPu8LoG

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
4092	msedge.exe
4092	msedge.exe
3568	identity_helper.exe
3568	identity_helper.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe
4092	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4092 wrote to memory of 4292	4092	msedge.exe	84
PID 4092 wrote to memory of 4292	4092	msedge.exe	84
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 4884	4092	msedge.exe	85
PID 4092 wrote to memory of 2908	4092	msedge.exe	86
PID 4092 wrote to memory of 2908	4092	msedge.exe	86
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87
PID 4092 wrote to memory of 3588	4092	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bb1f46238364de5b0831904f81337719_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdef2a46f8,0x7ffdef2a4708,0x7ffdef2a4718
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2692 /prefetch:8
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3524 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3524 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5856 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,4000880198511051191,11988348280780002876,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1496 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1552

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4512

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2928

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f9664c896e19205022c094d725f820b6

SHA1
f8f1baf648df755ba64b412d512446baf88c0184

SHA256
7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e

SHA512
3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
847d47008dbea51cb1732d54861ba9c9

SHA1
f2099242027dccb88d6f05760b57f7c89d926c0d

SHA256
10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1

SHA512
bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
5ece14ba38cb26dbbf073d18c7edb49c

SHA1
f444fe892ba200b516c98edf4926143c4e7427ea

SHA256
c7041dd9f2d55c3aef500901f2bf26e9ac26032bdbea64ee120e8cfe3ff97fc1

SHA512
0133fb32c2bc237f6a8240c0eafbd7caa64bf4bcd3cd1e06160c251ea7ebc889cd0d7a047739c7773ae684fd5f1fa63d244ddf1da2f414dd662c1a8fa241ab15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
844247707c2360fc31a1b0a8cc2a92f3

SHA1
bd3691278c0e248fb700bb565d192be69267a357

SHA256
6c4d4fcce8dc0737125e7e38d37046802c75b308ccce817035b04f0a3eeb589c

SHA512
1d7fcc0043875d256fcbccb4b6089f2c3cbe27843d968379058811309375a4e9306e524d6fcda942b4f9a36e3595bf523485649bdd9a30142b08a7d55f4d769d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
8a920a24e672a7ae202b147b676246fe

SHA1
aa7e505b6c1defcfe122c4cc4b514e453e1fa08b

SHA256
d575c873f95216dc183442622515d77340cd358387464dda36ef87baa1852d5c

SHA512
aa71ac1c7f0913d9d75698c671c2f7bb5b0d5f84c1ac158948de045a070fd11ea96460195566395cd8df3148cdc1ea91a6b7eeac24a43268cdc27873e71c4d6f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fb5d9f76d6cfbfa5728d698ebd4579e4

SHA1
a1d8e946bcd198582ba199824de6f45b2ff38e70

SHA256
a9e3958fe8b849e1584ac631136e3f2f18912b0cd888f0492458ce2def0b9f77

SHA512
0de40c966978ec9452590f03de2e09274884fddf1f4a69825495095e78eb8b4e31f3bad29200942ba6ecf062a8a24db44728813336af487f8741e4c455571ffc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
dd5631937af49802fba5700665ef49c5

SHA1
7d662ead11374198e611f6e5b4667edc747681ae

SHA256
2234ce526137bbee9657dc344552d74d13fa78789e1ca7e0c2aa53d9b26241af

SHA512
f3f6b6d35c0f54fdb5e8941602c01f85612e3279b123445c07dd3e0a64e10c1573290a4af8f883aa1411eb69d652e1bb7caa414e93f3044a2a606fd2edfabd6f

Download Submit