e0b9f8fa08aa707d7af26aa071d7aba84165038baa110bbabcff056c3fdfdaaa

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
20-08-2024 18:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b065c8566852bbb2eadebfb78865be24_JaffaCakes118.html
Size

101KB
MD5

b065c8566852bbb2eadebfb78865be24
SHA1

05c9fe3f4e6a1e07b9187add5cf6ae19fd7f87a1
SHA256

e0b9f8fa08aa707d7af26aa071d7aba84165038baa110bbabcff056c3fdfdaaa
SHA512

0874f00dfecafe1c7aefd35cdf2c51e97c9291bb16f57d96b494bcd80f150dc498c9d1f95c089db0a65cdd1017ae7d10c2cf3b3d5e7e0c0f440c670a55d99577
SSDEEP

1536:esBHv7ynvdTgtIABSsoGsTCJRoS6IMIA+KVz:3BHTGd0tIABSgY0orIMIA+KVz

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe
3244	msedge.exe
3244	msedge.exe
4604	identity_helper.exe
4604	identity_helper.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3244 wrote to memory of 1408	3244	msedge.exe	84
PID 3244 wrote to memory of 1408	3244	msedge.exe	84
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 3716	3244	msedge.exe	85
PID 3244 wrote to memory of 4048	3244	msedge.exe	86
PID 3244 wrote to memory of 4048	3244	msedge.exe	86
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87
PID 3244 wrote to memory of 4028	3244	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b065c8566852bbb2eadebfb78865be24_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8540646f8,0x7ff854064708,0x7ff854064718
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:8
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4632 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4032 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,13986219409469973358,7857936087853769854,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4960 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4728

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4800

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:948

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9e3fc58a8fb86c93d19e1500b873ef6f

SHA1
c6aae5f4e26f5570db5e14bba8d5061867a33b56

SHA256
828f4eacac1c40b790fd70dbb6fa6ba03dcc681171d9b2a6579626d27837b1c4

SHA512
e5e245b56fa82075e060f468a3224cf2ef43f1b6d87f0351a2102d85c7c897e559be4caeaecfdc4059af29fdc674681b61229319dda95cb2ee649b2eb98d313e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
27304926d60324abe74d7a4b571c35ea

SHA1
78b8f92fcaf4a09eaa786bbe33fd1b0222ef29c1

SHA256
7039ad5c2b40f4d97c8c2269f4942be13436d739b2e1f8feb7a0c9f9fdb931de

SHA512
f5b6181d3f432238c7365f64fc8a373299e23ba8178bcc419471916ef8b23e909787c7c0617ab22e4eb90909c02bd7b84f1386fbc61e2bdb5a0eb474175da4bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
93f9d760a917714f00036fc8ee720700

SHA1
6160bd621262dcdc8ed85aa26f2427525905af04

SHA256
c4ee0a650a7a3a19e72023305e1e59cd282a4ad07820901c99af8c3747126905

SHA512
d68a45fff3e73dffdc0ee123375da524f5cc7da9ad0e842db1507f034dcf7fdc8929219decc7c22b94df7249df854c2d5aa2921634839696dde7d6ee9b5c262f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
851B

MD5
67f8933405ee7af472dfeb50a67aca6c

SHA1
3d35296fb049e7a3c6ca48f50969cf92a96f2b4e

SHA256
56365d1fd128c28508a31749114cd6373b57583d5e0aa41a693594fca64d70a0

SHA512
4743b61ad6b5557af6c776df8f8cca55646fe6f54a81848f5642021248f2473ae7415692e3470c8737daa5c764bc2fc65fe72c42966a6b42cf1c270c5dbb002c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
851B

MD5
740ae6f5d6f58c0a105c93b4e5da260f

SHA1
ffe6cfdd3020a415e26582cd8a3f5cceaf0ad0a2

SHA256
211e5245b078cccaae514a3b26db556c19d719b181b24ff62ae548318111d956

SHA512
82ef6d80cf07512467114abe4bccf0bc6d1aebfe7a88033d41ff9ef9d0bace1a1a73a851b1970b93244de6a93712ffd0d95f806115758d9e4cb3672d1973d204

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
674c90ddb7b1fd83132876469041fe0c

SHA1
46b9c38c1b45758ba37e354ffddd3dfc9f1b9952

SHA256
ebdf538e681b3e03ec61cf0f88c13ea4bc95fd414a5325b0c90727ea1acbbace

SHA512
ff1d1e85cc64aacbb0954eb8a367664885213dd53f2001a0aa2dee29ffacbeb2aff4ba859f1cec16feb189941e0ef2caf1a8a8075cfeb57f7e0298b16e27cacb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
48da5ba4d18c1253553f1f11ceeaf4f2

SHA1
89aac4f657561f1db77a6e838bb13eca67483e3b

SHA256
bc11ac0a27fa6086c5646e3b4522bf8ec531ff0db536b278d742758750763846

SHA512
18ec3428ce0502c8ee92a8082c78d463f910b43b1c4790cfcfd87bc259b4f7d9838fda9475fe348f871fc6cfe3bd5bf587c5bd970056a0883acefd853cd2ca75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
67cbbbdd2f69ab0ec02374d2996a57bd

SHA1
fc069c122b0f7f872b3e60293be2990b4ad80987

SHA256
7794f3f5b584e777328f7ae58900769dc292fb64c5b31ff4bada1e5653af5ba8

SHA512
b79e08a8b5767fa02e9f5c8cdd03df9db7bacb2f765eee25c8680ebd0cd83be3b857aa50bd162dee23ab54ff6b4933369df2cc6f514cc2b6b4da8517235ea296

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
e28aa761f3ee663bdcc301ba112b27fa

SHA1
6b9dc1483953f7c7f5c1f33f204abc6e508cbea1

SHA256
8135755b9d86b10a452373fbc7e85bdb2c44ab01ee623a0b572586a0de9cec4e

SHA512
64147ecc77e67cf1ecd8306e0060b0ab6ef10bfe49d0dd044d78e5d17143069f2dd90701cc4b55c2368e58a486e0457ee8d96ab77bf01a5f4a0606dc43129bce

Download Submit