935792ad15c630fd6a249d6700f7a4686a98148567a151dbaf84e25d0aab36f1

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
12/08/2024, 08:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8e12a17ef9b3a92ec883c3966a91f0af_JaffaCakes118.html
Size

14KB
MD5

8e12a17ef9b3a92ec883c3966a91f0af
SHA1

5e7e2c8aa51f61e3ffffa3261ea4b0a8cc8a3b65
SHA256

935792ad15c630fd6a249d6700f7a4686a98148567a151dbaf84e25d0aab36f1
SHA512

7947ecee5138e5cff12db81cef221e0d0ee9a50d5c9a0548a1eda360e6cd191963fe127b189660748f891cd7781716218202fcddf4e69c5eb480bfe1cad2b23e
SSDEEP

192:zSh35jcfbR000+cBuA514EebtoWPgzEt9Vcb6PSxKi5gTHlLR+0w2PH5Va3+NYJA:uLcsF05PlYJDcMHGyrRnetD0/DF25a2V

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1852	msedge.exe
1852	msedge.exe
4160	msedge.exe
4160	msedge.exe
3988	identity_helper.exe
3988	identity_helper.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4160 wrote to memory of 3852	4160	msedge.exe	84
PID 4160 wrote to memory of 3852	4160	msedge.exe	84
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 4104	4160	msedge.exe	85
PID 4160 wrote to memory of 1852	4160	msedge.exe	86
PID 4160 wrote to memory of 1852	4160	msedge.exe	86
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87
PID 4160 wrote to memory of 5016	4160	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8e12a17ef9b3a92ec883c3966a91f0af_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9599b46f8,0x7ff9599b4708,0x7ff9599b4718
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:2
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:428
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5732 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,8877956232001380928,7280771142324650256,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5016 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1248

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4320

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4940

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7114a6cd851f9bf56cf771c37d664a2

SHA1
769c5d04fd83e583f15ab1ef659de8f883ecab8a

SHA256
d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e

SHA512
33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
719923124ee00fb57378e0ebcbe894f7

SHA1
cc356a7d27b8b27dc33f21bd4990f286ee13a9f9

SHA256
aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808

SHA512
a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
210KB

MD5
48d2860dd3168b6f06a4f27c6791bcaa

SHA1
f5f803efed91cd45a36c3d6acdffaaf0e863bf8c

SHA256
04d7bf7a6586ef00516bdb3f7b96c65e0b9c6b940f4b145121ed00f6116bbb77

SHA512
172da615b5b97a0c17f80ddd8d7406e278cd26afd1eb45a052cde0cb55b92febe49773b1e02cf9e9adca2f34abbaa6d7b83eaad4e08c828ef4bf26f23b95584e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
e8601f146343f52080f1007136c96f5a

SHA1
3973c57c66eddd28cdd382deeba9a9f90d90cf1e

SHA256
e032b51b42f9f0fe76c3a2d7c51c7c8cd5ba1c9a1d6578bad4a3de8cd93ab848

SHA512
9ec6d10e109cc55148974576bfc99fe77aaa8811dd02b0d7a5970118d0981d0365f70c02350fa17ba4392fa5b346187d00ca8dab2bdda069c24830d8d27ab81a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
bff99e7b7afbfa9023843a4e11fc4bb9

SHA1
ead4172b11e77b696f88c0d4577c45c72fdcb61e

SHA256
0a863380dcbd4206cddfd4912093f6beded899f37ae68f2aec39f8725044fc54

SHA512
95c5eb72c36903c36279986a2470b97c095a6ffabd0092a824ab0309096fb82bfc09eda32e079a7ae4f0cc145936894a8cd12f7c9baca0bc7adb055923440bd7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9078db0c2c5bafc40ed05f75072faea9

SHA1
6494ad07abd92494d973b4930e7d439bfc5375b1

SHA256
70d223312885605c8935eaaed879595383ffa2703f2b6129eec158421dad64a5

SHA512
86ae5810c100b9c389ee68b553153d8cd6af0c1e34f91e398cf50ba651b4640eda982658b9bb89c24f7c310331136c754ffb21c84d50cc56a8382add2ecc5ed5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e641c728fe2427bde08b924740a28596

SHA1
55f16c4caaadc5ab50dc925bfe9c86ba32a76a63

SHA256
dab3eb92052c4301eb362eff14b0fac282c84557376e4219b421f946b66f19e2

SHA512
93ee16177873f2c6117c367a3f480fc4bacb572e703a2797c2d8daa12510bac6ee2119f62dc064e53752c86204f450bb57fb3bf0f97d046242775e51c57aded1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
b559719d5d935a7a146863eaae4b76e2

SHA1
c0b80a9dc000b9562917226b172b80523d5964fd

SHA256
c557b1fb08e4bc4fd15a02c8ce7f1533f0db2af96ecca4179d812d05b62221e8

SHA512
73d65df0fa77f03015580a5b4805f38f96f5a5aa639e2dfdbf25b21dc9a99969f975d744f51b53b693b5d3a71664b60acdf8cef50c26e16d9f3d55f1a5b7e2fd

Download Submit