0585dfbb8c1190a837872c7cb61ed8e59aae7aae142f1beeca8e2a507cdda24a

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16-05-2024 22:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4d45dcbebfb1828195fdffb7e0a12462_JaffaCakes118.html
Size

68KB
MD5

4d45dcbebfb1828195fdffb7e0a12462
SHA1

332a6f37000c889b7e89b46c0f5af642bb0a1037
SHA256

0585dfbb8c1190a837872c7cb61ed8e59aae7aae142f1beeca8e2a507cdda24a
SHA512

46f5f97e2c16e9be451a9efc46f75a8ca92f0b8052e87ec3f54d565f02a9f9d85da5c7bdcd28311872452482ceffa63ed45352cb868f02456e6c3d0f78118396
SSDEEP

768:qzkJZspD3gGYydo6Hw9nJJvLc6hvLc68w2sBtuFG2WTvr32S9SCg:qEspD3SydoVJJvLHhvLHsdkFvrg

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3284	msedge.exe
3284	msedge.exe
116	msedge.exe
116	msedge.exe
4152	identity_helper.exe
4152	identity_helper.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 116 wrote to memory of 1480	116	msedge.exe	83
PID 116 wrote to memory of 1480	116	msedge.exe	83
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 2264	116	msedge.exe	84
PID 116 wrote to memory of 3284	116	msedge.exe	85
PID 116 wrote to memory of 3284	116	msedge.exe	85
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86
PID 116 wrote to memory of 3748	116	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\4d45dcbebfb1828195fdffb7e0a12462_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffae94e46f8,0x7ffae94e4708,0x7ffae94e4718
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2912 /prefetch:8
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,13181216103665752204,9885737224381748733,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5584 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4100

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4512

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3260

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
20KB

MD5
b6c8122025aff891940d1d5e1ab95fce

SHA1
a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4

SHA256
9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e

SHA512
e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
44KB

MD5
88477d32f888c2b8a3f3d98deb460b3d

SHA1
1fae9ac6c1082fc0426aebe4e683eea9b4ba898c

SHA256
1b1f0b5ef5f21d5742d84f331def7116323365c3dd4aec096a55763e310879d8

SHA512
e0c0588ff27a989cac47797e5a8044983d0b3c75c44416c5f977e0e93e9d3a9321b9283ea077e6dcad0619ac960ee45fe8570f1d5cc7d5d4117fee4f2f0c96b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
94d1ffc58ccede354436dc8e179cb9fa

SHA1
6e1afa18549eb1c34a5bdb698a3d20f4b0c5f74c

SHA256
b34635c72f3ddaf7e0844a13f9fff472bd25aecf76cd0e75fc13d2f8382a4720

SHA512
0f9f9376b82778f2458167cf919105383d196b837a085dde7dd6f9889f2020a5d050d430173add30d5583333ade3c73c850b2d245d5984798db607ce8d373f9c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
b853317ce7921c7e2e42750c315e86c0

SHA1
e589253b04dc889a9e86b7ffba9886b793e5049b

SHA256
7bd86f30b125e1a69150f612e96d8db41d98f49db2ac325b41fca91e5b862b45

SHA512
700ef3992d101a8f5181a290f2bb74f9f07b57eb61c9e1c435b0ccad00f512fc6b4b1d594101f27a05725ba1c1bc9a974ba4055d602b61437aba1e12e7b2a36a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
dec5af331dc1cc2c640ef66a5b2eeb01

SHA1
6395cca6b302cf3b4be4b6f01921c7301dc4dc38

SHA256
a454a4fed85a2c88f63a6774328285ccb5622a5332c9133698f58589743aec42

SHA512
4b79c6649f31bfbcc71e299bf8ed2fa41502eecf3ce4d8c919716b0284cb8c8053ad3c8b2a1a41673dbecb2eaf1a66f6b278cde45edbcd2e4ca8794fafc579a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a1c080ee2c2f8a323f052c743dd330a5

SHA1
0eaa8406fcbe51e8df3f20847a964e810b3f9403

SHA256
45cd4e7f14f4ab1792f7d81cb9d637be3068f8a49b475108fc26021120fcad1d

SHA512
294a92adbfb906f52dfc420a77b8af961955b16a38d425d45f3a69cec5d352d61d8e5faa46ae6169542b33f3be6c355c737b47ee57e4fc9947d79e41b8c49079

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d1bdfe4a84dac9f4de65b13324319faa

SHA1
7454f131c9a26610d711dea3b3780994ae04bdf4

SHA256
9580f818add699559cef4a8a47856231bf8c0acffc00d423884ae70c62f0220c

SHA512
b3c35d80620eef034d82d603bb8a211788c9602e1566ca96baf3c43b379c108dcba4023d80c1b6748c30e99335a238d2e35993290ce9b4783700bb4a76e9df21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
792a9725379532a9a4abbade09505f9d

SHA1
1ba6472b67fa3e4eac7edcb24d06a417584f1ec9

SHA256
8e1d23d007ffc0efea45325d38855f0c1f4ea0b7eaa1f609fb01153ac5827f47

SHA512
2761073fbbdbe5decc9c5021865eb3647cfa932ab5f6bfdb898227e7f1712cc95fba8b2f9d78f526ba08a11e20ad308d5b6244c6c2063854363d7695ac345f9b

Download Submit