2de03524054eedf64aab864c736c73bc79d73db49516fde0e8a214ea3e162831

Analysis

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19/08/2024, 22:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

acc770d13142e8d711b2a28d2a74d3fc_JaffaCakes118.html
Size

15KB
MD5

acc770d13142e8d711b2a28d2a74d3fc
SHA1

cbbf68a016f44a314663eb655de9d731cbb92af1
SHA256

2de03524054eedf64aab864c736c73bc79d73db49516fde0e8a214ea3e162831
SHA512

bad7fc1655f417d34df7688917d1a6b0fd1c2c12cfe79cfd332b7af0d14eb3c5ee989d67b0485a400b20a8b8a9076c960c39f5cf47497b1ff8d351ba888ebde9
SSDEEP

384:Kht/EfcBCIV04P+SdHlrxJfb3UvryauoxrnQeGv/9Q+wuFZV4LjFd6fAEB7IGii8:LcLR+0HdSG1MEQtH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3896	msedge.exe
3896	msedge.exe
3972	msedge.exe
3972	msedge.exe
2992	identity_helper.exe
2992	identity_helper.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe
3972	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3972 wrote to memory of 3464	3972	msedge.exe	84
PID 3972 wrote to memory of 3464	3972	msedge.exe	84
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 2776	3972	msedge.exe	85
PID 3972 wrote to memory of 3896	3972	msedge.exe	86
PID 3972 wrote to memory of 3896	3972	msedge.exe	86
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87
PID 3972 wrote to memory of 2152	3972	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\acc770d13142e8d711b2a28d2a74d3fc_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb974046f8,0x7ffb97404708,0x7ffb97404718
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:5152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,4194946928247668623,10678794395675043025,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2016 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3000

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2472

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4252

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
53bc70ecb115bdbabe67620c416fe9b3

SHA1
af66ec51a13a59639eaf54d62ff3b4f092bb2fc1

SHA256
b36cad5c1f7bc7d07c7eaa2f3cad2959ddb5447d4d3adcb46eb6a99808e22771

SHA512
cad44933b94e17908c0eb8ac5feeb53d03a7720d97e7ccc8724a1ed3021a5bece09e1f9f3cec56ce0739176ebbbeb20729e650f8bca04e5060c986b75d8e4921

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e765f3d75e6b0e4a7119c8b14d47d8da

SHA1
cc9f7c7826c2e1a129e7d98884926076c3714fc0

SHA256
986443556d3878258b710d9d9efbf4f25f0d764c3f83dc54217f2b12a6eccd89

SHA512
a1872a849f27da78ebe9adb9beb260cb49ed5f4ca2d403f23379112bdfcd2482446a6708188100496e45db1517cdb43aba8bb93a75e605713c3f97cd716b1079

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
209KB

MD5
3e552d017d45f8fd93b94cfc86f842f2

SHA1
dbeebe83854328e2575ff67259e3fb6704b17a47

SHA256
27d9c4613df7a3c04da0b79c13217aa69992b441acb7e44bf2a7578ca87d97d6

SHA512
e616436f2f15615429c7c5c37de3990c3e86c5e1da7d75a0f524fc458b75d44a5be1a3648a628d63e1cf8aa062e08b538f2f2bc9c6a0b42157beb24f82c571d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
f0c25d6ee0048924ca4d306c1ffa79fb

SHA1
18d5d30a2147a9a42976a95bd4478ebc3d01ce14

SHA256
6a9a1f163e30ecf558e22652a39e37bf79ec22eca2343e60892c8d2797e6e799

SHA512
8ec38bf3745c270cd40470196b14df311e984acae2d6e703c60148707a1aee8fc319849b323fdf6e2a85dbfe04a3be06c2cb14016c2e0fb3e58e5567cf9b9e83

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
f885557855e0d14d53adb3a7c5b7d98d

SHA1
c2ffc0e2aac27b75eab30db2b6c1dcc0c2d09e5d

SHA256
c3b1494ce106b8026ae4f23b54bc12629422a8a6713588ca6187077dcaa40ec4

SHA512
a8528c92f85ad137ccae4926f38323b9b84628be075d2901530fed5ce82bce80f45fd87e6945932855ee68b389de539e7266b4cd3554b6bc1f708c1cae473a39

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
0c2ce9aab04635117415f094422d871e

SHA1
23516bb0a8855f16dd0e7be33dde3f28167afa83

SHA256
9b7a9e7445f8281eea5dda0625fa288527f219e9c469f01a3d76feab7cf6d539

SHA512
3b73aa4f13e5ddf8548a7e82a1cde7fd26421b022f90fa70d36895358841c8da06ac0451c767e97d55f47406bbde0839bbbe914eb485541c0c1b95ad3b1c38bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
aa4628817b5c6154082f52a8fb15f5d5

SHA1
1e7329b328dfe8f404d05467bf944050efd115e3

SHA256
8c8182e3db97181049ad726abd125728bc8b41ddb49539c42d8920d8430ca15c

SHA512
f411bc5b3c01bb69be4d91e7dbb8db15fcdb4c78ce823adc3d81f04ba5022e580df2cda627b186e1f151e509ac388a9468fc5bf580eacc40417af69a484f3885

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
c8b8cc97e94620336f63a8a0181c1170

SHA1
5cc276a7d6878b9a0523105dac365d646817216a

SHA256
68d216a7e0aedc9d703a8fe45091e2ce760c439f273d6f6e701987d03d459e04

SHA512
07b3f3c086ae2fd7266a4f7c866e0329063ed6fa51e022291071d09ba70fc5f9ef06cc58d7c99bf0853342d777056bfaa4090a0b5a8c559b5c26d23817563294

Download Submit