f895632c9bf3ef0ebbad2e8ea2dc71adaad4214a40fd2b51831b4b54ef13cbdd

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
31/05/2024, 11:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

86d8dc009e01b574f76ce414123e0749_JaffaCakes118.html
Size

64KB
MD5

86d8dc009e01b574f76ce414123e0749
SHA1

78bd40f4080a235a6f1289104fef76a25647317d
SHA256

f895632c9bf3ef0ebbad2e8ea2dc71adaad4214a40fd2b51831b4b54ef13cbdd
SHA512

e6192c8547869097c02ef8532bbcb00c7780a05f5c90c1cdccf03a9d036fc7d3475b382178b0eff59ed71f3dc5b9007cc961916759f8d4ebaba02e12af7ae327
SSDEEP

1536:oRA/DUju/OMIP2qwQ9qw2wOGO/OQhIx96tbtmM8CjmFElcXJsijJ6hwCN6GlSB5i:oq/DUjSbIjwQ9qw2dzhw0lSB58fl3zu8

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1372	msedge.exe
1372	msedge.exe
4192	msedge.exe
4192	msedge.exe
3056	identity_helper.exe
3056	identity_helper.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4192 wrote to memory of 5076	4192	msedge.exe	84
PID 4192 wrote to memory of 5076	4192	msedge.exe	84
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 3360	4192	msedge.exe	85
PID 4192 wrote to memory of 1372	4192	msedge.exe	86
PID 4192 wrote to memory of 1372	4192	msedge.exe	86
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87
PID 4192 wrote to memory of 1104	4192	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\86d8dc009e01b574f76ce414123e0749_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffedb2d46f8,0x7ffedb2d4708,0x7ffedb2d4718
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,11890979378154962364,6792062462252804709,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,11890979378154962364,6792062462252804709,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,11890979378154962364,6792062462252804709,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2908 /prefetch:8
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11890979378154962364,6792062462252804709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11890979378154962364,6792062462252804709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11890979378154962364,6792062462252804709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,11890979378154962364,6792062462252804709,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,11890979378154962364,6792062462252804709,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,11890979378154962364,6792062462252804709,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3388 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11890979378154962364,6792062462252804709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3580 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11890979378154962364,6792062462252804709,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3392 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11890979378154962364,6792062462252804709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4124 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11890979378154962364,6792062462252804709,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:2064

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4156

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1328

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
ba4748d8816c8b5e15078e487afc5339

SHA1
32683ebc95fcd045bff4e09be6c80f49d8ac6b59

SHA256
d5e7dd33fb0704a9cfb5f189bfe44b8736ef2deabdeb580a467ba375c1e94ffc

SHA512
973996399ec5be44845f6daa3f0b9d40101074a277bfed91430a4627429990286725aa1ff5108c62de7e8e65abbf3392cfa9040e608d10a945c184bea6099bae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
484B

MD5
0e5e3bdb8bac505a9b635586da80d188

SHA1
89c0ceacbf854649fcf159de934a1bc56cae0854

SHA256
a589a8f7a3d7dd3887e364767bb798ca1e98874b43da0774fdb2a1bb0bf9ad98

SHA512
3959256505148eb9b2eef5b0e05d28048d44122f5728bd66fc2dc058f88349c12fb1214bdaa2d7e8659196539bc426a054b025e896ef2ed4594a3777fcdd39c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
3b373e878fb60cf18dfdd8652359a3a2

SHA1
aad6c7e43c03fef93e61d49c47e0e2ff99ccd3cc

SHA256
d0c8f74f4212392c641a76c29be198c6ddb54d511ab7da06f206e3916f8a4707

SHA512
00fe6c31bd6ae498fcaa416240fc91bfe95fc263c4a7e9b407b436bdf1acccb09f76458627655ed6b7ff34bc54ef72d7ac1f4c1a71267c98f94c72587215057f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
41281e29743542be1e172bb870286920

SHA1
73b0886cb20d76c5e299fe6acd6a3411f80619a0

SHA256
ff69d2ded6048f0a0ab22bd955b236273975d0ede4f41dc251c995cf41fe9c73

SHA512
848515633e588763f795e8931aba54572ef5f4ab325117bf88bafb40cd3ad9f27c42d9f53fa3317a32b41d44a9bdb8011415e604a055feb66682dfeca8091080

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2dbb5c35a37770f7aec25f6d5bb07439

SHA1
792a83773ff984e8d11a13223061db16485f9e18

SHA256
4eaf6fc952654828ab7ef8cdfe6902c312163bb79f49f5d7f57f94979c31b00b

SHA512
b614722c055a05c069564c0071a91dd416d15ab45116ea2b591708cb92cdf8e325a189809ace20cd67431f6edbb1710a1d6fa9a934d60e7faf78d69f58d0935d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
372B

MD5
41e893cc50007faccf85a8ec787a1bbe

SHA1
f96fca88c2f01bd784d6cf5ad354339ff0eb1266

SHA256
7443560ae981d535e5917034b141532d4115e171c3608e2ba00087403164a537

SHA512
6aee4585e0907f2ab98c139e5fe1b0dd5a39a9d25b7d272ecc44f6e169f9bb754cec6f953dfa43b706c162a67eee8429c28788ece51dd95ab4b59cd825254ab3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58d973.TMP

Filesize
204B

MD5
e257c52fb7a47d4fbecfcd797b356ec8

SHA1
9800095936c1f7283e6dc035d5e8f69ab43e31f5

SHA256
c36b4accce5cb84354bcf6098b8bd24323641ef846c91a27576100aece8a2f8f

SHA512
90ac422e17877161ce08df5e0f763b80d8ebe1e5d3b94ee760b16f6c9dcfe596bf5de2ce442f1eda62ba56f62f4d205264cb5e2b2df7a83ef5668f381033debf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
fff70b6f8925adf1d2290f57a41da1d1

SHA1
97f6ce37ec44feddc6b95ab637a2555c014b549e

SHA256
c65def86b2f9cb940e8a9b73b3a6130fc573a85ca41a94b6631a88f5749e8e16

SHA512
cb6b661b2f4cfe671369bb7c2a98f485cf3de16408f4e35712570374194e952baebef547d18250f744f9888315f6a6cc96138d2b596c09c5e905a90455421bc6

Download Submit