751929cc7ca95ca86e707398023ef22c91b4ff36ad2c595329b859ddc0beb157

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
12/08/2024, 12:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8eb1cefa564f6d1ffb584f9ac50ebcd0_JaffaCakes118.html
Size

12KB
MD5

8eb1cefa564f6d1ffb584f9ac50ebcd0
SHA1

f8dd1c3d9227bfa4f414e78dfa5abe3682507298
SHA256

751929cc7ca95ca86e707398023ef22c91b4ff36ad2c595329b859ddc0beb157
SHA512

a41360bbdf351369bd713fa8e4491fb74998e038030dab65e6849f98c1d14f4b9ebd7e95b96abd2d8c7c075f4e920c521a537102b993cc5a5a93a6e357306da0
SSDEEP

192:g0hn5jcJcwnQ1h7gjsnMT1laEp3/6CGHUEw49KIGkMm4YlySST1D47ALRFR8VJR+:FzcJwCGOgiLqVgfNJPGRKjCFJ2

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4824	msedge.exe
4824	msedge.exe
1844	identity_helper.exe
1844	identity_helper.exe
5136	msedge.exe
5136	msedge.exe
5136	msedge.exe
5136	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4824 wrote to memory of 1272	4824	msedge.exe	84
PID 4824 wrote to memory of 1272	4824	msedge.exe	84
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 2868	4824	msedge.exe	85
PID 4824 wrote to memory of 4936	4824	msedge.exe	86
PID 4824 wrote to memory of 4936	4824	msedge.exe	86
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87
PID 4824 wrote to memory of 2960	4824	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8eb1cefa564f6d1ffb584f9ac50ebcd0_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd956346f8,0x7ffd95634708,0x7ffd95634718
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1816 /prefetch:2
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2848 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4388 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3084 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,10847043370026607187,16976103168246261429,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1300 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5136

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3288

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4952

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
210KB

MD5
48d2860dd3168b6f06a4f27c6791bcaa

SHA1
f5f803efed91cd45a36c3d6acdffaaf0e863bf8c

SHA256
04d7bf7a6586ef00516bdb3f7b96c65e0b9c6b940f4b145121ed00f6116bbb77

SHA512
172da615b5b97a0c17f80ddd8d7406e278cd26afd1eb45a052cde0cb55b92febe49773b1e02cf9e9adca2f34abbaa6d7b83eaad4e08c828ef4bf26f23b95584e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
c63a56d4401ee06d4df05d907440ead3

SHA1
9721cd84250eafb4b1dbbd1a90cd07dbc663d6b7

SHA256
1135145413a702e23bd7c69e78b13ecfaa4ba1ac42f6e31ca13c7352b85fe8ab

SHA512
ee651d662c6149358f79a36322de13618278055577efbbc545d2334b54fd7e6807ab62595899fb99afe2627d2ebb69d5f5dd5b9902467d257f8dd9291dcc741b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1801682cc5d1de2c1a6d0b18007b878f

SHA1
550953717495a2d311a73a96970733608675c3a8

SHA256
3f3c7215ef67fc8e1c98154a85c701e3748ee0a2b5d7caccb874f15a08f7eae1

SHA512
b5e56578e835881faa97fe52a65a8a4afcf32f3105c8af5788d17a9712b5a83fde9e2b3ce2d8244325f59cc7137815aa39d5792a4a6b5e3b30e095805e0a6dbf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e7c1dfad73af824b854cb23ad40666b6

SHA1
0ffc6b1456e88bed294a697ebc89e6b625b9a24c

SHA256
d8e3265a0e81dd05f9261dc7c2e27f75b7a79b3766bb91757c35522c474c0f4d

SHA512
04b5804010eb89f07f77590c05c541b0ede28ccb3a82108685b0501e63afe44ac9c21bc0417b722e53ff82e5261118755bf7b16ac1aa46f7c3470ca720e965c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b6087272a6d4ec97137921b89a5718b8

SHA1
586a78975a5925fbe4acc7d15bd72c7846aeaa68

SHA256
146769e1d731ca37c80e3f740cf4138a38df6f65b42bbfcfd59d59fe29c9f4a1

SHA512
f97766ff2a48d60f5fd19344aa53feb0e050cc97e6366afce751c3e6dc5f2189fb9a3626f8f0e5c02ba561cf5e98b41eb051eb3d7476e36ec2d95fe5ce46c0e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ffbe874941b603af0c1e11c8fdf5a394

SHA1
29704d2ebefd8fd3b28ce46e3061e7da4574b6f8

SHA256
f8f307aa6186d73f2b3102edad205a310a565a5f80e2c8a7dab45b2279cc112e

SHA512
550f2b823b2d57d18f28b18d96124768e76268192bdef58a48059244d4dd45cec90557f83ca2f134cf59c2314ed04bc92a5c752a9f7faa58e432c72b299f3608

Download Submit