44776acb33206e37afe57d3e1c29f40aead30ff20ea01c1a878fe2329617b2b7

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
27/07/2024, 13:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

78565fd1f71828a5e857919353a5923d_JaffaCakes118.html
Size

57KB
MD5

78565fd1f71828a5e857919353a5923d
SHA1

702c68247ded68cac8969c6320813a9b902b7cf3
SHA256

44776acb33206e37afe57d3e1c29f40aead30ff20ea01c1a878fe2329617b2b7
SHA512

335cd70265f4a8c499adf260cc2ae9ffbddef1af0834d661471024f86c22899ec10d4c4556c1ad7b67ee482d0f1029b300d93bbbf2ba4c0ea288bdfca6a04e19
SSDEEP

1536:gQZBCCOdY0IxCuV52fNftfkfkfOfEfSfrfdftfZfefrfGfef0f2fEfcfKfNfMfjX:gk2y0IxU1lscWsazl1h2TO2MeM0i1ErX

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2440	msedge.exe
2440	msedge.exe
1080	identity_helper.exe
1080	identity_helper.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2440 wrote to memory of 4320	2440	msedge.exe	84
PID 2440 wrote to memory of 4320	2440	msedge.exe	84
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2064	2440	msedge.exe	85
PID 2440 wrote to memory of 2388	2440	msedge.exe	86
PID 2440 wrote to memory of 2388	2440	msedge.exe	86
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87
PID 2440 wrote to memory of 2012	2440	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\78565fd1f71828a5e857919353a5923d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9303046f8,0x7ff930304708,0x7ff930304718
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6304 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,6153573776835528030,14864285286150033178,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5260 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5884

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3308

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5028

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2f842025e22e522658c640cfc7edc529

SHA1
4c2b24b02709acdd159f1b9bbeb396e52af27033

SHA256
1191573f2a7c12f0b9b8460e06dc36ca5386305eb8c883ebbbc8eb15f4d8e23e

SHA512
6e4393fd43984722229020ef662fc5981f253de31f13f30fadd6660bbc9ededcbfd163f132f6adaf42d435873322a5d0d3eea60060cf0e7f2e256262632c5d05

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
54aadd2d8ec66e446f1edb466b99ba8d

SHA1
a94f02b035dc918d8d9a46e6886413f15be5bff0

SHA256
1971045943002ef01930add9ba1a96a92ddc10d6c581ce29e33c38c2120b130e

SHA512
7e077f903463da60b5587aed4f5352060df400ebda713b602b88c15cb2f91076531ea07546a9352df772656065e0bf27bd285905a60f036a5c5951076d35e994

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
210KB

MD5
5ac828ee8e3812a5b225161caf6c61da

SHA1
86e65f22356c55c21147ce97903f5dbdf363649f

SHA256
b70465f707e42b41529b4e6d592f136d9eb307c39d040d147ad3c42842b723e7

SHA512
87472912277ae0201c2a41edc228720809b8a94599c54b06a9c509ff3b4a616fcdd10484b679fa0d436e472a8fc062f4b9cf7f4fa274dde6d10f77d378c06aa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
2a3d365a72713625c7933b37fffffe84

SHA1
b1e63e60e85e7b40fdc1520ceb5d98229b71a50e

SHA256
8a376f85d61b887e52d2270ead7f660222b5983f5961e4e5563c93b0abf744ef

SHA512
36bf138bffd1a99465da65c013534903c30696faf65edcb0b4dfa1f48577c12e76887698fe9f506ff92a5eefaf38c04c4f53c998e401f22d4b1d10998cb9d4e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
57ce9746c49b62930a965a8cb2a3332a

SHA1
41fa4a524abfce174ee904b60831de4fca1d5aa6

SHA256
838f0b7fe0dbf43cd34cb42c1c67a452c8a4dbaba66f5f6686d4544e412533d5

SHA512
8167331b52420e0f9fff09fdfc4071ce2701fb5527be85d897a9e965d53dfc5919710ac5997b6adf3402e4e1b6cd5ec1ae04bad70f307258d0ceabb6a97304ad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
b5b61598cca0615cbbd2f8483e8a25d6

SHA1
154e29bf465ccff43f4f8e528365ec1512d117fe

SHA256
b32d5b964c035345f070823eeea5324c4538efb7ce5b1b0cd0e792502ea77162

SHA512
e7f8715e0c17854e40345fe0eef0e4a6e5e432a9bd5cefccb52b09cbc3440a0f7aa610637d9a1353695efc03fb9db2689754065d3eac8beebef8c60d79654609

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
01906ec45a097cd57221e521c984cb37

SHA1
6d19842b4641e14302db79b047d5ad570550a137

SHA256
72a80aa0676019c3f4bad02bd8b61a191c0e54630c0def5669b8cf61bf8a1dcf

SHA512
02ea21ec1ac733a44eeb3f27f18216b6768101b57392c41df2badabd03d93329fb10cc840e612cfb576417c47941c61b84dfb80223d8da99c8b309ecef4b45a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
e08fce8221b42d4d21d531bb32788a7b

SHA1
7ed46788e0972287ef9336ff8473ae108afc7408

SHA256
9af59419e55d0cb61fd388ea704fc2a35e76002c44c1e1b8c411e5c0b0e8cc59

SHA512
a2b49a2fa0347c8bee655ccc1e70c46ebc174a2633b427a17ae096285e4c9058fa49ae444860db7ec7c6cdc947121a28537168ac0d9b9df34040ff4ea439de7e

Download Submit