61e4861a3a8ac88a54ea6b18f0ac9138cb4f895255c7a4b74959463ae35b294d

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08/10/2024, 22:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

26a90e59fa7b748c49fe4d22177da859_JaffaCakes118.html
Size

71KB
MD5

26a90e59fa7b748c49fe4d22177da859
SHA1

d67c7134e60e0589fead0757a20f53c87912e85b
SHA256

61e4861a3a8ac88a54ea6b18f0ac9138cb4f895255c7a4b74959463ae35b294d
SHA512

28699283f60c7ef04c76ce3a6399c46aac339670655783afcf2039c3ee0fb586bfc990a95cf1d1e709769cca38d41f45b2b75555eaec8df05b306fd6135118e0
SSDEEP

768:Sv0hqGbIiP//mdvsYSgLj/DVWmTMYq8Dfr7Vq3t40MSxjfLD+PHgkyMrj3DZ+/VR:SSIk/DtnwOHrZ3ucv

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4124	msedge.exe
4124	msedge.exe
4184	msedge.exe
4184	msedge.exe
3448	identity_helper.exe
3448	identity_helper.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4184 wrote to memory of 1436	4184	msedge.exe	83
PID 4184 wrote to memory of 1436	4184	msedge.exe	83
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 3296	4184	msedge.exe	84
PID 4184 wrote to memory of 4124	4184	msedge.exe	85
PID 4184 wrote to memory of 4124	4184	msedge.exe	85
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86
PID 4184 wrote to memory of 3032	4184	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\26a90e59fa7b748c49fe4d22177da859_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9920546f8,0x7ff992054708,0x7ff992054718
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4056 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,3120798644524785951,1545166016831650696,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4844 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2588

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4088

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3056

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56a4f78e21616a6e19da57228569489b

SHA1
21bfabbfc294d5f2aa1da825c5590d760483bc76

SHA256
d036661e765ee8fd18978a2b5501e8df6b220e4bca531d9860407555294c96fb

SHA512
c2c3cd1152bb486028fe75ab3ce0d0bc9d64c4ca7eb8860ddd934b2f6e0140d2c913af4fa082b88e92a6a6d20fd483a1cb9813209f371a0f56374bc97d7f863b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e443ee4336fcf13c698b8ab5f3c173d0

SHA1
9bf70b16f03820cbe3158e1f1396b07b8ac9d75a

SHA256
79e277da2074f9467e0518f0f26ca2ba74914bee82553f935a0ccf64a0119e8b

SHA512
cbf6f6aa0ea69b47f51592296da2b7be1180e7b483c61b4d17ba9ee1a2d3345cbe0987b96f4e25de1438b553db358f330aad8a26e8522601f055c3d5a8313cdd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
e7a5b0154b43e22b7e0ab312fbc0f278

SHA1
969f18c29f6c57c49ef649270971a016341dbfcc

SHA256
8521e975c7b46a974fe43208bb2ef3a92c57d22eb2b1d15fe835386479520784

SHA512
2355a36ea31ea4d36c52c9e6a02e587a35db7a2ae9bcb381e2c9d641c948222e014831deaae0d72fda378db2188c74ad0eadcd71007a7e3f4dbb5627117c6f62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
401B

MD5
be9cf6fa3f11af0d60d6e966b833f92f

SHA1
bbbe3a4206ce9389c199f1a956c36555242d1e42

SHA256
3f7b1f2c6176a8b6d385b034fac164dd0d6550f31b9dcfb093eef287e36b0313

SHA512
55d580a09ab49186299208c8033fccef1fe20ac23c6f43a1a933f0f7244a4a1096a5618ad3f746f934ff8d12a99d96638f63e17edbfadfc01d48b7ca18a87337

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
032695989834cd316178450fd8e76ea3

SHA1
9bda2ddd488bec74a003ec2b02ccb067881faab5

SHA256
dd13531cbb648924a51dce6b4c91c43afbd412f7c399386b88c004558737c486

SHA512
cbecd86c3acfd4e35c416789e5c93d57fa00d899a8aac3e107e2fd4e71eceeb5763673f2d7f662193dbe8c69cade74ef6c5344f86fae8a523edea51cd0afc3b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0ff0db202783534e457e9ed8ed01b0e1

SHA1
85f6d7eda9261a361df086811d81a03b2081721f

SHA256
f87edfc9e83f8e153fc8f16eaeb7f644bd1112290f3055255f75119384eb1972

SHA512
df5d63308b8f382e8e038ff97a47fcb44e290058585624b5f4262e4515a08002c2b0194f4216bde5694333bba1511956b91982a6708cf07567adb8ff6c4a850b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
12d8f8463f0d83030973b03b41355628

SHA1
9c36cedf06606a801b70f4a9bc1eb07f0b7ccb57

SHA256
c10ec634f67d9de51f06d9bf39eb83b4213ed8db0a06f5893c540375b354b6c6

SHA512
5196ae84385f035052a3150be535ae2bc659d673573f8d3972d84ab3ed0e783bbe009e4f1958e2bca7ee9d68f25c124d9476fbd4b23572770670bbb810527888

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
03ac0465e07ba026295210b2ffda4f65

SHA1
5a692c0ef4957bfdc735ae4aa0a21c2a4e2c9af7

SHA256
17e3e5e3558f027409a98467511a0fa89a35b043eeabd14d6a5412f3aeacba6e

SHA512
d84f59db0869df20a28b49914704c838c58038f671afce1c7c0fb527a5494b0b8f698b99b8d231f165bebb0caa4f430819cf521bab689bb542b9319e827a31fa

Download Submit