48417553e70473d3ac55796cf19ffe04cb364c4f5765e90141d1251bb13653e2

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
04-07-2024 07:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

251eb6a6ca2ca5f62f3148208f39ed9c_JaffaCakes118.html
Size

69KB
MD5

251eb6a6ca2ca5f62f3148208f39ed9c
SHA1

4e722dea1810c7b1061288f3ddc00e2cac313b8e
SHA256

48417553e70473d3ac55796cf19ffe04cb364c4f5765e90141d1251bb13653e2
SHA512

ad967a953fc6dad1d620661d3c7c5ac673e2ddf45ec57fac82fcb7ee94c3bbbf76c24c30296a1cb5019cfaf32ca95a4f98549bccecb5c945cf76177a12c78d8f
SSDEEP

1536:gQZBCCOd50IxCpBu1os0e3h8YhLvR5wdYNg1aSwy3mFl+w38tWbRnVuiJVP5yM1g:gk2r0Ixr1os0eR8YhLvR5wdYNg1aSwyb

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe
2540	msedge.exe
2540	msedge.exe
3184	identity_helper.exe
3184	identity_helper.exe
3148	msedge.exe
3148	msedge.exe
3148	msedge.exe
3148	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe
2540	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2540 wrote to memory of 1080	2540	msedge.exe	81
PID 2540 wrote to memory of 1080	2540	msedge.exe	81
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 2780	2540	msedge.exe	82
PID 2540 wrote to memory of 4996	2540	msedge.exe	83
PID 2540 wrote to memory of 4996	2540	msedge.exe	83
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84
PID 2540 wrote to memory of 2112	2540	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\251eb6a6ca2ca5f62f3148208f39ed9c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffea6ed46f8,0x7ffea6ed4708,0x7ffea6ed4718
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2852 /prefetch:8
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5252 /prefetch:1
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,10074620619588365219,5567003012003261780,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1836 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3148

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2828

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2468

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\92ae0f8e-3fb0-423d-8a27-7a70dc0da6df.tmp

Filesize
6KB

MD5
5eb4c201b66a71664b2b26780f23ac34

SHA1
61602a0b3176e38b9634455089031106c3365687

SHA256
08983129bdb6a46b37e15510e4ab18d14251b0f146addb604ed2ed7f53a7704a

SHA512
b995933392e5629c4eb61f5afa54fe46c1c402963a8bbdedb664bfb725ce8cba15859cbb2cfa5ddfda70275be2310378042ccffd538e178cb48b2e22ea37e73a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
9f2ab81567c54b276800502ab0b9eb93

SHA1
9f155d078933141fdbf4258f1abfe2208e4c46c5

SHA256
1b504da81b9bcd050e7cd12e17bc7d7bc75d403b9ee1617b36ecc6ba5aed474e

SHA512
bd761d8bc0e43fe42667db8e181f2302c9aba3c33ce3429a0d99d1d090b8b16769d35bc0d5a70bf120f9e9a6261c66ccb9019def3d63f32b08d360f73db29bbf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
baf7dfbba0dc853dc8919527f819d089

SHA1
4a1b1b4ce64a45d0894e5f3376dfe726d0c5a1ff

SHA256
7e076ae4572c6029a9d67c766a6eba7a857461578e53ba9c14b6b65c2bfd1d50

SHA512
4c807c8804432aa64fdb3a83ea83573100cbbbee7c6fe6a8a8c4599bce1deb4a0c1a49c87d4c6f216ee39ca3fbfa3e9ad4b51b5d498c3f0eb5e54f77bda496d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
334401229b681d1e0df993850ac20925

SHA1
483a1914cd831e5ef84c6ed2c05bc4093c35dfb6

SHA256
0cc713420ce37af17c22d3eed5bef05e8449880be5ebe1f95443130591f41f01

SHA512
8fdfafe29da7eb1bb72daf2785628b9dbdd35572c31f238c8fb4127f2ef7f0391294f139fa0d8104730f449435039b0ac2d83423f7ee5dc03a2cd32131663d69

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
946639b61b3b9594b2b257e14e381e9c

SHA1
ba7309fa79361aa6be923d82ff4a3c6674f1d772

SHA256
a93a682ba4366b5b4010e06787a47ef72dcd59662f25e03ed7956f9af7c0450b

SHA512
1881484fb66ee52468a0546ac1650f43c6c98f724da2d3ee132198c4b189e63d00992e1fe9beba32ae6569e63cf8ff9c312718430ee9ce0e80288626ecf99a4f

Download Submit