59aefea6766c9fd0b7dfccc6582d0bcb6ea7b326f45e1c0944e26b5155ce51a6

Analysis

max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22/07/2024, 09:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

62bbb9e61da116d161eb855d6f2cd190_JaffaCakes118.html
Size

107KB
MD5

62bbb9e61da116d161eb855d6f2cd190
SHA1

f55578058310858e9f6233ca66a8ca617c4d82cd
SHA256

59aefea6766c9fd0b7dfccc6582d0bcb6ea7b326f45e1c0944e26b5155ce51a6
SHA512

5323f015b3f6d5cc8b139ab4282290afd0b249ab82b9f351ec90bf7486ee23179fd62619edb9157a15b4e4ea22105cc9b20b61a3c4698bcae4ebe21c7360b3ee
SSDEEP

1536:mlRkOcXdwiv4aK49Ka/TNtg1kDkYaa/aKVWD:mTkPtXvfK49KaLHg1CkNzb

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2700	msedge.exe
2700	msedge.exe
456	msedge.exe
456	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4288	identity_helper.exe
4288	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 456 wrote to memory of 2404	456	msedge.exe	84
PID 456 wrote to memory of 2404	456	msedge.exe	84
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 3052	456	msedge.exe	85
PID 456 wrote to memory of 2700	456	msedge.exe	86
PID 456 wrote to memory of 2700	456	msedge.exe	86
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87
PID 456 wrote to memory of 4412	456	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\62bbb9e61da116d161eb855d6f2cd190_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffba97546f8,0x7ffba9754708,0x7ffba9754718
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4844 /prefetch:1
  2⤵
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1260 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16813409865703184594,8964103275093516307,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1
  2⤵
  PID:5000

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2024

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2676

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c00b0d6e0f836dfa596c6df9d3b2f8f2

SHA1
69ad27d9b4502630728f98917f67307e9dd12a30

SHA256
578481cd359c669455e24983b13723c25584f58925b47283cb580019ef3142b1

SHA512
0e098ab5f5772fec17880e228a0dccbbaa06dc1af14e0fd827f361599c61899fe07d612a7f7b049ff6661d27fdc495566dd20fc28ceed022b87c212bf00be5da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
54f1b76300ce15e44e5cc1a3947f5ca9

SHA1
c978bfaa6ec6dae05464c6426eaa6cb3c3e2f3b7

SHA256
43dec5d87b7ee892a3d99cb61f772ba403882ac0772423f36034e84244c1ca24

SHA512
ac26e5676c675be329eb62b5d5a36a0e6014ab8a6366684b0fc2a59ae5f061f596f462b82eb4e9f135d2235a0cbd4af96680d234eecc873a8397fd81507d277a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
6f29f4bab09af6f846fb0f61e22ad2ed

SHA1
350be20e08a4a632589260e896e9c4a1a97c4ee8

SHA256
2f346bd27414578b7ee2043afae5e7d4cef420f55889440eda5f6d5409fe6c95

SHA512
f89596fdb59236503e934cde61168309fd24419a83d6d6153e9c7b5b97d79de5e578d8ba3299467f6f5089ca84367483b23051459d3d5db295bd9fe1cfabfd6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
e05c4454aa24b781c5e2f18885d0f79a

SHA1
38a36bed506c192cf8f843af6402135330cf4226

SHA256
2e523f5168238c246733f2d3acd812e5017f2b6b7626774270a878d222378273

SHA512
ac1af99897dead470ed7ccfcacd6aba85bae1c533a460d5a741f29348217b76c30d4aa6c786cb44aa8f5a9814439c7d3a1a0588d512517aa977b296f7bf168a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
408B

MD5
315db01ec6c34930c0d36a3cf4779bed

SHA1
1258ae11e3c5436e978324bec12c4304a325d99a

SHA256
7092d05c6f2ffce7a8c3c23899c06c578948c40d66fbe7be442301d5d7a2905e

SHA512
9c50d4fdb6868a9cf82247dcaa8e524a16b2b8f76868010c9602f7e4fe479b81642955723fcdd395b1d0667e284e1ab1e85ce2a0499a6aa7c7042865f9a85834

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
408B

MD5
c51a90fc409733fe9c13356eb81fb4f1

SHA1
d005945c3f1d110433409490c0d7c161cac14200

SHA256
456ba759b4afde0cff2cc135f52b3fae42654b377d6f3f24afa6d29955e2af2d

SHA512
95cd43748c28e5d33f2425a5f12659b399ceee72c0a93f0694ea888b8ac4f62ffe09fcad6bbc53a99a19fcef0518462ea6c0e2ea6394ee898edb425c3faa5b13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
aecdab3c601f513f101f528236c7892c

SHA1
0ec5ac35b36c8b0f00646f1f9326632eb9cb9b0a

SHA256
0c249bb6c519ac6d5051b35772477115537467f581f6a355578eba8323a7dc9c

SHA512
6aa914193f6499294bd7fd17764c17b9324d45991e02d1a592ccccba913fc53ec0aece4611fadb0fc5e2b8cc568aec923294791829e1e42ea43d150c3a5fb9fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ab3eb97f-969c-4cd6-9849-62b7ba825570.tmp

Filesize
5KB

MD5
b90c626054198ec44e46d24594599558

SHA1
ae78cdb7d85da2ea2c0cad7507e0cfb891c5d644

SHA256
36d0740046d02cf965b3473f2b52e35f64cc5c622e42e28b4941b9fad6b972bb

SHA512
6621adedcc21a1b68d5a1cf86311145b319dfed6680c31fe4f3abd8c66ee5dee9b1d38bf5f1a263c24df90259e194af0b1804914a3361acedb7f5f6feb397e4f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
f9b6d03e7eac4c34fbfa61db8b242ea5

SHA1
c31287715fec5f86579bc58c3907b4aa185950bc

SHA256
30ff32ca82780307590d4f86edd6220171276c4a8d7ddd4042b960dd9a5c4288

SHA512
f4de47a24891e05ed063f6758d8bea4f9c64d34170302410726b30c35332b21627ee3b7e23e7267401755e20b19af9ed01abc53fbad20773cef53125edf1ba2a

Download Submit