d845518b97b44e8f4a9bc1365e6f8f38b4d091b66bec65689e14f5b3b831302a

Analysis

max time kernel
146s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
22/08/2024, 12:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

b7b6495180cf64a46a30d5352b31a277_JaffaCakes118.html
Size

23KB
MD5

b7b6495180cf64a46a30d5352b31a277
SHA1

8dcca588b7d4b7e046cb16678f42a989111db57a
SHA256

d845518b97b44e8f4a9bc1365e6f8f38b4d091b66bec65689e14f5b3b831302a
SHA512

d90522fe675dd73f88f519bf601f202a786eebb331f337be0083e893982558e14ff56ccb9613820b478629809607ab5c43a911f916117b9784aa4e4d3e9536d6
SSDEEP

384:llfu1pnVeoPZIl2z9HjAAQDVyDENVWXEwWEWeicPG8sM0Ewu9GWwxi1xiE:llfGgl2tjAeDEN4SEWcSW7

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
812	msedge.exe
812	msedge.exe
4848	msedge.exe
4848	msedge.exe
2144	identity_helper.exe
2144	identity_helper.exe
4352	msedge.exe
4352	msedge.exe
4352	msedge.exe
4352	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4848 wrote to memory of 3076	4848	msedge.exe	84
PID 4848 wrote to memory of 3076	4848	msedge.exe	84
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 1796	4848	msedge.exe	85
PID 4848 wrote to memory of 812	4848	msedge.exe	86
PID 4848 wrote to memory of 812	4848	msedge.exe	86
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87
PID 4848 wrote to memory of 2520	4848	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b7b6495180cf64a46a30d5352b31a277_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffeed946f8,0x7fffeed94708,0x7fffeed94718
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4608 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4516 /prefetch:1
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,11548085548850327296,14096228915497272362,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1976 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4352

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2576

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3068

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
111c361619c017b5d09a13a56938bd54

SHA1
e02b363a8ceb95751623f25025a9299a2c931e07

SHA256
d7be4042a1e3511b0dbf0ab5c493245e4ac314440a4ae0732813db01a21ef8bc

SHA512
fc16a4ad0b56899b82d05114d7b0ca8ee610cdba6ff0b6a67dea44faf17b3105109335359b78c0a59c9011a13152744a7f5d4f6a5b66ea519df750ef03f622b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
983cbc1f706a155d63496ebc4d66515e

SHA1
223d0071718b80cad9239e58c5e8e64df6e2a2fe

SHA256
cc34b8f8e3f4bfe4c9a227d88f56ea2dd276ca3ac81df622ff5e9a8ec46b951c

SHA512
d9cf2ca46d9379902730c81e615a3eb694873ffd535c6bb3ded2dc97cdbbfb71051ab11a07754ed6f610f04285605b702b5a48a6cfda3ee3287230c41c9c45cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
434cf81de3806b7e9da88d77a2a56687

SHA1
e77fab2655eb67b4b0b5b04ff8133d4bec558882

SHA256
d436f8da39d35137d14ae7c890e6036013f4680d6d033da82a85d81e4f468252

SHA512
dc9ac6800ff8b6316f2871d98ed9cc4e446f467e104bc234446429f6eff03cf8713023656b3300e4b8d21e922387fae21e2b56dcbafec9ea68871e9973ee77a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
38ce9dfee88478d61432691651840ade

SHA1
9667c4fb5a802214706e121d5c44bb6e69ea25a7

SHA256
706b3c4fb4f452fdfb66c2d7b33b8e846960aae2f1dc0b4301c881eb5a761368

SHA512
2a5621907ac8e011ac4b1746c9d8d373c9f8e0cfc3e04890702821cee48f835206b92c2269f71068800318c410da235795fc306939422c44cc691a4a0dbce9ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
2fc251d8ad382beaf0ff64cf2f66af10

SHA1
84fccf6b1bdbeb3b552510ef8231259063722abd

SHA256
41fa8a017d5eea565d5be58216d605e7d8a2685387c3a5734bb91d83aa738d74

SHA512
faf3d927b7777f31a5a2057b7a1efe4cae510819aafd6b2ed023bd2973a6db8eaac3574ab6b8ae48d90ddf97e4906fda58c6c45fa102dbf92e2f57c1c61ffc85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
398baa69c8b313806d7f7f23a9c422dc

SHA1
887cb4f784b1dedc63d3eb347307c57cb7df429c

SHA256
77c9c66a3d06b457280cf6ec8225fecf654191e9c5a1fc26ee088cb0f4911c99

SHA512
aacce09ff89c42b0bc4139ab512bbb795246123872afe4b84981ad709e0e33eefd127c751bc6f3a177c169f167a5e60ef0f42d4eed7bccaa0c4d2d4f99b59571

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
161feeb8b62a51131cc2ad88a35d1d1f

SHA1
0cf242f537a608851575d1566b0ebb618d468f7e

SHA256
531669622f0eddd43d8f9ed7c91851bb954ef4a4ebcc98b5339a13890f218009

SHA512
0103562349ecade7d7e7154e34a37a56caed44a4a5cfa9b67cfe968dc5fa0fc3f8185af8706227f9ae9666e823003f0e24cababf91fda477ca6d106bb2207674

Download Submit