8233797357f9be36d927abdcf511acd6a15593a43e201df3c8999754d57a6783

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
05/06/2024, 00:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

96d40c7bdf467702e3566c14df059563_JaffaCakes118.html
Size

34KB
MD5

96d40c7bdf467702e3566c14df059563
SHA1

066ca11a26e68896a550760391f5f9d2528afff1
SHA256

8233797357f9be36d927abdcf511acd6a15593a43e201df3c8999754d57a6783
SHA512

30b1db28c8b167627e6d6eaa76530770f537da26e51eb95bdb43ecc5a0a289b086d1cb98f665b3301e96b98f3e80e0e44cccd55acbeec46b8f45a11f5edabf45
SSDEEP

768:IF8bz1bJ6Lb2vbGDOX4/R9b8fYz0MToGeW01JM4JVYAX2VyhyP:IF81d6LSaDOX43ofYz0MTk8uZGUAP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3220	msedge.exe
3220	msedge.exe
2712	msedge.exe
2712	msedge.exe
1728	identity_helper.exe
1728	identity_helper.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2712 wrote to memory of 1896	2712	msedge.exe	82
PID 2712 wrote to memory of 1896	2712	msedge.exe	82
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 116	2712	msedge.exe	83
PID 2712 wrote to memory of 3220	2712	msedge.exe	84
PID 2712 wrote to memory of 3220	2712	msedge.exe	84
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85
PID 2712 wrote to memory of 1028	2712	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\96d40c7bdf467702e3566c14df059563_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa970046f8,0x7ffa97004708,0x7ffa97004718
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,5289952949044069847,8687635442715606175,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,5289952949044069847,8687635442715606175,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,5289952949044069847,8687635442715606175,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,5289952949044069847,8687635442715606175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,5289952949044069847,8687635442715606175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,5289952949044069847,8687635442715606175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4816 /prefetch:1
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,5289952949044069847,8687635442715606175,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,5289952949044069847,8687635442715606175,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,5289952949044069847,8687635442715606175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,5289952949044069847,8687635442715606175,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,5289952949044069847,8687635442715606175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,5289952949044069847,8687635442715606175,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,5289952949044069847,8687635442715606175,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1964 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1268

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2928

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3584

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c9c4c494f8fba32d95ba2125f00586a3

SHA1
8a600205528aef7953144f1cf6f7a5115e3611de

SHA256
a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b

SHA512
9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dc6fc5e708279a3310fe55d9c44743d

SHA1
a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2

SHA256
a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8

SHA512
5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
23KB

MD5
e1c71f7c04be834f5587230db2ad24b3

SHA1
f3bab9cb99d9f343bf7ed3981aaa7450515d2424

SHA256
9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899

SHA512
205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
becfc19183bcac56869de9721f7194b1

SHA1
71ec606a84c1ec2abf23bca713414fec141b73e6

SHA256
05aed4348b9e25c2a0083ce24d05f525caa82f3831e9376f0e5a67876ecc8e32

SHA512
697caff7e99dbc77bd37aa63b6b21e99e963cbc86946e722409181b0e5a9d004d7a7b41b0bfd0817ecc5603ab11f3336b693d10ea8d7cd30ed4c1e5840b182bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b245d8bff6bd14958be77920ec2b0d1c

SHA1
023b01931231957c947cbe90e0e10978f4fd7d7c

SHA256
9e697c156dee35da25bff027caa2b8a8b38e3f4c8f0e77c2ce45573e96a7a8c2

SHA512
3e7a267d7b5438a8216bb6c8b5b6db44fd3630b372227f596a19c0099b574e6e9eeaeb0e72888223d5c34b94e8a578859f16b0a66aae80a5ce382bc521186feb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
b04af169716022e84ed2c48d560c67ad

SHA1
24e801bd852e8e77118fc6ba5557f877b97ff42e

SHA256
db1b931835e74acfe726f00dd39e970d0816f0ca3f497e9e569557254a2968f7

SHA512
519cbeb40ce419f5fa02f06720dd48bea1bd210d9308ec4e85158668b397e22292b6b21b92d223b9b62c20e64b6238b6dde17dc7a54a2f7fddc9d13eab07871b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
af450a946ab7eacb66e4e355d3e79dd8

SHA1
a5ae9a5a297569616d7e22f3ee7f342b638a6d61

SHA256
e8fe24d32601fa31a2379ab9d85d0632f7aa0b10341b8115b820e6adb1d3045e

SHA512
364fa1406e5767b75fba5da546edcb1bc515917f9b58ed960f1cb84c29dde47a89189258c9e257e1b075f668620491e396794507060f9feb7d0ff088e785c67c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
644a1d92f42cbc24e3b9b72f831e1f01

SHA1
18ed4e457c393eeea3febaa8a183a35cfdd038eb

SHA256
835395a1860c10c3e3bcf82ef22700065d33a785530cff29928f732553984369

SHA512
cb43c8dad7f93020bac125ef640647ad012d89ef1d79e10525a33fb523606841a9e0e44b3fc7514ef4e2d0fd69ef6326b6197a539f94cf231caf8cc821b1eb75

Download Submit