573911bff0642cc5ea3c63d77f84c388e6a606e9406f9cec485b97b38ca2b42c

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
18/08/2024, 07:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a5df35662008541cb550c99280322abe_JaffaCakes118.html
Size

10KB
MD5

a5df35662008541cb550c99280322abe
SHA1

48916fef39bf5d56285bb3d4d033a5e1a17248c9
SHA256

573911bff0642cc5ea3c63d77f84c388e6a606e9406f9cec485b97b38ca2b42c
SHA512

e10e4a8bb0833ea892e8e695fd8c3523102948fce2d1d4118a91c8067adc4c3d6fa395dac0d0542509bbae0e042b9caf8a0c81749a4aef1a034d128d7e0afc69
SSDEEP

192:w9+4Du4gcUh1QI9f4MdcgxY1EimJQuMtONoB241dkr0R4jUXOKqS8LgF8pQ0uo:GRBUooFF7iiMx24fBXOKqJgepQ0l

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4004	msedge.exe
4004	msedge.exe
1844	msedge.exe
1844	msedge.exe
3620	identity_helper.exe
3620	identity_helper.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1844 wrote to memory of 464	1844	msedge.exe	84
PID 1844 wrote to memory of 464	1844	msedge.exe	84
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4000	1844	msedge.exe	85
PID 1844 wrote to memory of 4004	1844	msedge.exe	86
PID 1844 wrote to memory of 4004	1844	msedge.exe	86
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87
PID 1844 wrote to memory of 3796	1844	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a5df35662008541cb550c99280322abe_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb6cbf46f8,0x7ffb6cbf4708,0x7ffb6cbf4718
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2708 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:1
  2⤵
  PID:528
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5176 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,8769406911556679396,8633618028303436919,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1888 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4924

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2744

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4072

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ff63763eedb406987ced076e36ec9acf

SHA1
16365aa97cd1a115412f8ae436d5d4e9be5f7b5d

SHA256
8f460e8b7a67f0c65b7248961a7c71146c9e7a19772b193972b486dbf05b8e4c

SHA512
ce90336169c8b2de249d4faea2519bf7c3df48ae9d77cdf471dd5dbd8e8542d47d9348080a098074aa63c255890850ee3b80ddb8eef8384919fdca3bb9371d9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2783c40400a8912a79cfd383da731086

SHA1
001a131fe399c30973089e18358818090ca81789

SHA256
331fa67da5f67bbb42794c3aeab8f7819f35347460ffb352ccc914e0373a22c5

SHA512
b7c7d3aa966ad39a86aae02479649d74dcbf29d9cb3a7ff8b9b2354ea60704da55f5c0df803fd0a7191170a8e72fdd5eacfa1a739d7a74e390a7b74bdced1685

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
0731398230f178b39b5bf1f741c00c40

SHA1
13b66b4cbf892c4dd5a4591112da17ce33d2727c

SHA256
4a8cac9d2c436d332b6d8d40b9c05b52e8de4e76a2acedc901dc5914ed783f10

SHA512
ecb2f1008252f79cf538eb6da9b69b93832d5cd07c5cf79ede198c131257f164478d6e46c16688bacc2f87a452bfe0a4f7d8f63286856d8962d7188197fff2ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
189B

MD5
443319881835b14fda88caab9945e84c

SHA1
adb420bd20774e8eabc4d3d53ecfccb20ae7cb54

SHA256
fd79d0831e92ccbffc20eed3a0d07b39a121b4f3be4f720d2981fdd2e7b5b8da

SHA512
39c2c7fd638c04ce244473831d3dc8175e8e9ecb9a0df38370300233202d7d7fa9166912b8d97b34efd7b90eab6da376191e1c5c9ce253e96c9686b886ab29fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
0d9d9efee104adf0882eead777d5b9a5

SHA1
73ea5bb105e5fe573a9519c7dfef18ef49bf0597

SHA256
e6deee6a2584f199afeeed321834d4d3339bda315e976a103368a89833e727f6

SHA512
cf8f07e567f10484fae172b0daf53294d7ec687d8c862579171d76e13abe52f44fcac31e220c5f64c48ae5475f949ab9602feb3b60b8be2bc200ef20a4d51782

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e7318da7a4bc17d2e75066389bf8bb7e

SHA1
4e977ff12baf5ae26ff26525aad6fa607b12a0f0

SHA256
4e09d8944e6a6f3165189035a8e4917e60242847a595c069ac350fb430f0d89b

SHA512
7be721ace3fee4f20edc91c95c087d04729c9e99a8d9dfbff4e284f347458316598188b7eb53becb23dad0d1a1a375d295eb776e33b3df46b370917378a186a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
74eb7e447fc910db61ccc5117079bfd4

SHA1
7299a9b9a2daeace4500294d9921672dac362bc7

SHA256
47bd5632f44ff568f626f6a5b3d20519d6ecafe3afc07bbb7078dfccf6c289ea

SHA512
f67cca648598a17f9a5feefa1db48b2bccbf3f0e958b1d2e1b1ba051eb708beeaee545a5b0b66d6a235059cc93c75c80a895dbb5201b9a77d1616d501fe95274

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
910ceb718b758bd9f5adeca7cbc85a9d

SHA1
28b23f55c81db6c64597c21e27434fdafe838cb0

SHA256
edc497832f70996f5ca28de892881bfccdbb34e26d0759b5e9acce6dee6e0587

SHA512
9eeb75e94faaf2af36470fdd80ed9497fe7638a8ad50289c741672a6b3b07582062451ff3ab5b86f853c2a81035661378d08865ddc6dc159ff79d05d9c5092c9

Download Submit