d0087cf21eb354d74391974c4c1917b1b1836c13fb79073a1b927a986b954d92

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
17-08-2024 01:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a0a28c99fa7a115cebad8d97a13d6d33_JaffaCakes118.html
Size

44KB
MD5

a0a28c99fa7a115cebad8d97a13d6d33
SHA1

cd4d68c01b853fcde3a4bd1434289c5cbf717647
SHA256

d0087cf21eb354d74391974c4c1917b1b1836c13fb79073a1b927a986b954d92
SHA512

88fe196196588eee7c5a2c7bd41a7cb8fc524e7cd80ac7bb6686d0cae067e317d5f7b85d32fb9226ecc553a76c55ac2aa4d399f1c2decd89805b4346dfec1ed1
SSDEEP

768:Zcd9QZBC7mOdMAupC5I9nC4okpxq8z7Ff3g2hEEHY1Lr3avswuwDwfypxK1Pd:gQZBCCOda0IxCAq07Ff3gjwuwDwgK1Pd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4012	msedge.exe
4012	msedge.exe
2924	msedge.exe
2924	msedge.exe
4192	identity_helper.exe
4192	identity_helper.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2924 wrote to memory of 2780	2924	msedge.exe	88
PID 2924 wrote to memory of 2780	2924	msedge.exe	88
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 5036	2924	msedge.exe	89
PID 2924 wrote to memory of 4012	2924	msedge.exe	90
PID 2924 wrote to memory of 4012	2924	msedge.exe	90
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91
PID 2924 wrote to memory of 4460	2924	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a0a28c99fa7a115cebad8d97a13d6d33_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb271d46f8,0x7ffb271d4708,0x7ffb271d4718
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2804 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1932,6687654928415047141,11498177477842891940,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6000

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1256

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2360

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
209KB

MD5
3e552d017d45f8fd93b94cfc86f842f2

SHA1
dbeebe83854328e2575ff67259e3fb6704b17a47

SHA256
27d9c4613df7a3c04da0b79c13217aa69992b441acb7e44bf2a7578ca87d97d6

SHA512
e616436f2f15615429c7c5c37de3990c3e86c5e1da7d75a0f524fc458b75d44a5be1a3648a628d63e1cf8aa062e08b538f2f2bc9c6a0b42157beb24f82c571d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
ec2c6bef51f379e3af7bc232cbc3a11e

SHA1
5d30de2fb5e11ff4f3a294b98f92cfd21b529099

SHA256
73d9ed701d80aa14d26c7648393b9ac129ab7f3afaaaf79de2904af65f50d0ba

SHA512
c457c528691c54c600beacd89e0a6e959945c4d98b1aa90397cf611911d370cad98b89874626edee05a576bb1c7ec8841d3f9e562e2e8ffee34db1f93fc2c078

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1e8a52f63fd4687d33dd437b347ec710

SHA1
2bc12f847f405cca9135830fcc7e72811210b45e

SHA256
8c63fb569909838e6fc5617afb60dbea1a68616f15bf15e6d8c5a2f0475f809f

SHA512
2bd8951a387f8dd1c245d10123206532f6c7c79bd05b24879b2c608eac9db8e5915bbffbebe5973844957ce74c659de7a89adfba02602dafd3cd4b1016428d10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
39eebebf2b97b5a98d790adb01dc4d83

SHA1
0ee010d975d96a9922c58140c8b72db8bfe0d298

SHA256
7594c8396ed1e246b0c29e5b7eb7481328ab7e27926cb55a953a4bcda2456517

SHA512
e2b7b6ef3a744a75252710982920256ace634cb0b6eff6b61c23c173bff7da86eee3f6f0c549b72b49d83dbe6c2b6c72d18e024ed4b8aa072fca7a5cb860e20c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b4120b1e285b95e8e63d78f33af170c4

SHA1
9378720b66415103385de5cb4eafe5f047479e51

SHA256
580f37759774579db7c9400ac01a71ac8e3f114be08da595dec614ba8ecf0e2c

SHA512
475ee128f3c16bc305326ffddec7f1935d91af48fd273d18af94cc8f05fd60276c7faf2237cd76665d1cfdaa64edeac8fe7f765369205e78eb3ed20bc46b84f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
35a9d2da30588609cb893028db88d828

SHA1
7507f5dbe791c03c2f6633415e7f547cc21aa863

SHA256
55915f21f45bede489c7173dcf056c0314b97662d6cc62f348ca7e26ad7e6dd2

SHA512
c9cd73cdffd7d6c5ab9edd53c73ab957cf22d0b8a4a138d3ecc9021041929dc675b022c406d17c3518465d43ab1b751a87a4675bdf303076ade2c84f1f298a2b

Download Submit