a8ca4bb7dd77d468cc876a5a05279fea4f9d8a4b5dfadfe98d719b1e087ae282

Analysis

max time kernel
145s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25-05-2024 06:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7116de22d6e2b32dba02c93349a59b85_JaffaCakes118.html
Size

64KB
MD5

7116de22d6e2b32dba02c93349a59b85
SHA1

d4523d0905c50313ac2200193924f72e811cbb0e
SHA256

a8ca4bb7dd77d468cc876a5a05279fea4f9d8a4b5dfadfe98d719b1e087ae282
SHA512

3da78c4e85dfde1c592cc660f25b987d00c397b88d6b4043ceb55b4e5d30bd5cdddc05ee11371da92501e4d7d2e5717f22f9d6d78477f4f46bf4400d2095eeda
SSDEEP

1536:SHXHEHT17To0FrD+zXWqc4qWuPt/1q6ILQxBl5gF63r/:SHXHqbrDoXWq7NuOLEgF63r/

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1400	msedge.exe
1400	msedge.exe
620	msedge.exe
620	msedge.exe
4488	identity_helper.exe
4488	identity_helper.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 620 wrote to memory of 4616	620	msedge.exe	84
PID 620 wrote to memory of 4616	620	msedge.exe	84
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 4036	620	msedge.exe	86
PID 620 wrote to memory of 1400	620	msedge.exe	87
PID 620 wrote to memory of 1400	620	msedge.exe	87
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88
PID 620 wrote to memory of 1716	620	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7116de22d6e2b32dba02c93349a59b85_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff850fe46f8,0x7ff850fe4708,0x7ff850fe4718
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,2588978406415819123,9296531860759486583,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2012,2588978406415819123,9296531860759486583,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2012,2588978406415819123,9296531860759486583,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,2588978406415819123,9296531860759486583,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,2588978406415819123,9296531860759486583,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,2588978406415819123,9296531860759486583,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2012,2588978406415819123,9296531860759486583,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2012,2588978406415819123,9296531860759486583,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,2588978406415819123,9296531860759486583,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,2588978406415819123,9296531860759486583,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,2588978406415819123,9296531860759486583,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,2588978406415819123,9296531860759486583,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,2588978406415819123,9296531860759486583,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5956 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4740

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3640

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1864

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
56308325b37a5d90c0152312773419d6

SHA1
c8911b2f0d3cd72eef5aa695614a1d9aa2f4aacd

SHA256
65412d5b88c43b262736721ef2489c63877e11190726e19ea4f9d012450c488f

SHA512
808f1f0bcf357f655fe8906816e63836cb31e477711b8eef705f4e21738c4b66ab480d46d6428d22a9e8c994fa48303eca440229569e0cf6de06f1f6a3c85d86

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
764101e8baf2c93e9558c60c77366cd3

SHA1
3ccc08c591bbc01895fef32727260063ae6550de

SHA256
a36639409f555b4adcff5b15416f1c2e0549505ff6c325cef296668389c68f09

SHA512
33561282109da3f05f30a2c59e527b53d6602b9c6f915ad38106e44649849bb0a020f07bd047cc630991badc2d8883990ab970f70c37b0779d1682f9306754c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
d2727a0b3a3c34fd2946edc8fdec11c5

SHA1
73fe715991499c848e0a0a48f942effea663e811

SHA256
b3ac5b0bfb6bd4b68c9ce5c14ff6b6c197fbf79718bde2da906638d87e75c08b

SHA512
5bb6da685e2c5ad2f9343898076e4722d1f8268384c6b5a6f2312348ddce8feaf5e223cca085141d9ad136b34c694f633e5096a891211afe6edd31f1c5677bf3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
8e12dfa2c35785ac1b15a0df1d0e7a8a

SHA1
071b400285154e3ffed835f4354e7b2a5b237f8a

SHA256
ba95b0bef63557d4ace72c6362424f872bc60ef0149cd9df9119a8fa4fa1b3b6

SHA512
31dc22864ef9f62b4b7f3d4f5f921ee798b076fe2e2bc9e299248ab58903397fe78e9ec2aabe9045fd0a9ea70aeba388f29847c6c564f3308b2348fe3de5e60b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
59f0030a1e3371ea3c91729bc9d51328

SHA1
8ee4c7695c43b92a2dc6c259a45f54503a9352f0

SHA256
fe5fe5f2003a23263fe23b8042bb3a42c59b8486e23c13828d49a41c433313a4

SHA512
2b9c2b9ea4d57cda8338d1df54283cbf20486a515d3dd9d84ee4b1602884cc4e61e13d9cfe07e8ce8f151e18d705bc4291fca69e93a77cb23ee1418168bca58c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ca34c960c7488a694c42c2b5215908f0

SHA1
cde617fc0f02dca4ffae5898d446d4f8be1d0cfb

SHA256
946f59fde924c0a35abc674fee7990783ed8e52b179ea141694c1ac30d651e6e

SHA512
4dbdd83cbf5e06c27cdb8c71aaf77103b8bfabcc0f5e6d8272b4ec1c2333797d91827c65d31077a5812373c349653261aea63ca4861a71d96c253bb872d140d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
92307c0b0f27d3b7893adf50e7c6c55b

SHA1
22e88bc994d23232228f771ceef20f58cc04c925

SHA256
2373b5d983b6db12a932b252b9dbb32770e951553886193d9fcd9371b3730de8

SHA512
463186d85fd83c2ebe698e84d5924daebe15da264dc5a4733b82bfd1281b534b2b38117916a7d0874a713cddee85665e507d29ead7bd4069a31e24cb18eb04ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
b090c17e4942f7d1bfe11617898a37de

SHA1
775ccb684f336bd3fd03384df1f7558007f3fe52

SHA256
85c2f63b41b7a9030850d75d7f023e4e1d0fa603eda2f43a062385f72a90efce

SHA512
170195f25b10d539943067ebab565dd4c2bcbe17575dc93e83bc4d7040722e565af4c2b5dbd488b56e307cfe173e86711271a8ecaf7bb32079a13d615364456f

Download Submit