7f9f295d3ea3d370589709fb06137b52b5a770f0b96ec1b984f611e684c1db1b

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
23-08-2024 11:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bb7664c95d5413c9aa88be81b71b41ba_JaffaCakes118.html
Size

6KB
MD5

bb7664c95d5413c9aa88be81b71b41ba
SHA1

307e3ca2cd9e7fabe93787385a222317d6230114
SHA256

7f9f295d3ea3d370589709fb06137b52b5a770f0b96ec1b984f611e684c1db1b
SHA512

23473ff96f1fd43a690d8bdee9f31784671e11d147d167ca9fd638ad45e810f351279489a71918cb60c6a3932fcaeec275f9cb67d4d9104fbfe367c7260d7730
SSDEEP

96:5enuHY+JhbYtWVz/NvM+T0P75FIpttyybNQ2Mc1LlHCZOEOZz33b3E7Zfiz7D5bI:bxhj5oERDwWlzc5

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4168	msedge.exe
4168	msedge.exe
4024	msedge.exe
4024	msedge.exe
4080	identity_helper.exe
4080	identity_helper.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4024 wrote to memory of 4464	4024	msedge.exe	84
PID 4024 wrote to memory of 4464	4024	msedge.exe	84
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 3708	4024	msedge.exe	85
PID 4024 wrote to memory of 4168	4024	msedge.exe	86
PID 4024 wrote to memory of 4168	4024	msedge.exe	86
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87
PID 4024 wrote to memory of 4896	4024	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bb7664c95d5413c9aa88be81b71b41ba_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe15eb46f8,0x7ffe15eb4708,0x7ffe15eb4718
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2916 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,13597156853575751809,12069982964275357558,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3036 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1856

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5112

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2600

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
53bc70ecb115bdbabe67620c416fe9b3

SHA1
af66ec51a13a59639eaf54d62ff3b4f092bb2fc1

SHA256
b36cad5c1f7bc7d07c7eaa2f3cad2959ddb5447d4d3adcb46eb6a99808e22771

SHA512
cad44933b94e17908c0eb8ac5feeb53d03a7720d97e7ccc8724a1ed3021a5bece09e1f9f3cec56ce0739176ebbbeb20729e650f8bca04e5060c986b75d8e4921

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e765f3d75e6b0e4a7119c8b14d47d8da

SHA1
cc9f7c7826c2e1a129e7d98884926076c3714fc0

SHA256
986443556d3878258b710d9d9efbf4f25f0d764c3f83dc54217f2b12a6eccd89

SHA512
a1872a849f27da78ebe9adb9beb260cb49ed5f4ca2d403f23379112bdfcd2482446a6708188100496e45db1517cdb43aba8bb93a75e605713c3f97cd716b1079

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
212KB

MD5
2257803a7e34c3abd90ec6d41fd76a5a

SHA1
f7a32e6635d8513f74bd225f55d867ea56ae4803

SHA256
af23860fb3a448f2cc6107680078402555a345eb45bc5efb750f541fe5d7c174

SHA512
e9f4dc90d0829885f08879e868aa62041150b500f62682fc108da258eee26ad9509dcbf6e8a55f2d0bdba7aa9118dd149a70a7d851820d4ea683db7808c48540

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
e212fd30ce1c25a13f0045a535999642

SHA1
959c248ae086ba67221c4f0948dd32d67e60fcb0

SHA256
1a80eab86c1667354077dbf17ecf945af37adbd28a10c5e4b7c9e8b821249379

SHA512
962e8086a6d62889fd59b88405615b96a6e90b8abd78a6d42cf0c93354ddc9793cde242644d80bc27cf22590eb06dee28e1a8edd7ee52fb76c1d32e7048985b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
818B

MD5
85f4d6618a9b556b02837512c26f4531

SHA1
91af9ab43b7110f7c5ced66fd70c4808d7aa2507

SHA256
6c0b14dcceb92d9adaab3c9ce20a884bd58eade6660fdc72ca5d687e16e154b9

SHA512
79ecb15e84c7c12aada39a3308ffcb810c031c755dafd68606afaabd6bff6e0eda2b6bbb3b821c5af7edeaad32e8be1640ee0828ad668bc722e7a2f16806ad9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
5914236a15791824b549342cec5dc40e

SHA1
e260b1779ce232a1348fe7a31a07ff6b4286e3c6

SHA256
3f15418619e72e26b75abeba8ab0e26ac4be6ea50bb8f1341d0cf8d46e13d038

SHA512
05e22bef1aa94a4233576a1ae03172c19dcd1f248fb5d38e81ca9069a028792778c51bed17d0ae1a29179eb31030673ce23353741a445dae3b646f59c18c7eb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fe2ed228b894f4533b82d9d2bf58ecb8

SHA1
8378fc7037c6558e6f8a1378008d00b4577ea0e1

SHA256
9b7edd16308b5ceb31fa99d5be9255b4b5193d47a3895a38476c929e38ddb239

SHA512
2411b556d04cbc8f2cb36a9faf8024e2dbc0483e749ae0571fd393ba00f21cb543812f9499c576f09fdca95893c45738b234f43f2cf633d0de5f52ae1139deed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
284a6149edf2a950c07defa889354880

SHA1
87cb83a38e3f6916f4b5fcfe950b4a32515f911f

SHA256
bf225b7e06527aaeba9077b4d15d7e67e0fd822aec5a46e8360d24ebcb11098d

SHA512
89ae6aa416b97c30c02550dc11a1907a40135e248b452e1b9cce8c2736ad0d3efb52c2d9f5f93ccb3add86d40ab7bf1c2d176e232d903017dc88c4b0c88fb89f

Download Submit