72d60be5934c015c16370e1be23827292abfb363fff7addee6b633c239855130

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
28/08/2024, 23:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c7d704c8234a0d98eecbcefd85a5d78d_JaffaCakes118.html
Size

71KB
MD5

c7d704c8234a0d98eecbcefd85a5d78d
SHA1

1af97551a848e75a3c18cff59ee5795ad21caef4
SHA256

72d60be5934c015c16370e1be23827292abfb363fff7addee6b633c239855130
SHA512

eb43487287b04bb74ef0c145ab07354a934b7b5574253a0fb58c81b2b057a9da168556aa66261baf647c034617d7f690db9e4935b54aa1c2841c88cdcca0fc15
SSDEEP

1536:euGW1AGWQIaAkP3huvpieUiesQe87ePqELY4W9reJeM/Afaydhg:sW1AGWhaCr/Afaqg

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
3184	msedge.exe
3184	msedge.exe
2616	identity_helper.exe
2616	identity_helper.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3184 wrote to memory of 4028	3184	msedge.exe	84
PID 3184 wrote to memory of 4028	3184	msedge.exe	84
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2964	3184	msedge.exe	85
PID 3184 wrote to memory of 2104	3184	msedge.exe	86
PID 3184 wrote to memory of 2104	3184	msedge.exe	86
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87
PID 3184 wrote to memory of 3012	3184	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c7d704c8234a0d98eecbcefd85a5d78d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa591d46f8,0x7ffa591d4708,0x7ffa591d4718
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1956,13691512346306900382,11217301634799154423,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1960 /prefetch:2
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1956,13691512346306900382,11217301634799154423,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1956,13691512346306900382,11217301634799154423,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,13691512346306900382,11217301634799154423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,13691512346306900382,11217301634799154423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,13691512346306900382,11217301634799154423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1696 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1956,13691512346306900382,11217301634799154423,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1956,13691512346306900382,11217301634799154423,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,13691512346306900382,11217301634799154423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4012 /prefetch:1
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,13691512346306900382,11217301634799154423,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4772 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,13691512346306900382,11217301634799154423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4112 /prefetch:1
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1956,13691512346306900382,11217301634799154423,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2548 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1956,13691512346306900382,11217301634799154423,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1824 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1372

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4644

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2200

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9e3fc58a8fb86c93d19e1500b873ef6f

SHA1
c6aae5f4e26f5570db5e14bba8d5061867a33b56

SHA256
828f4eacac1c40b790fd70dbb6fa6ba03dcc681171d9b2a6579626d27837b1c4

SHA512
e5e245b56fa82075e060f468a3224cf2ef43f1b6d87f0351a2102d85c7c897e559be4caeaecfdc4059af29fdc674681b61229319dda95cb2ee649b2eb98d313e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
27304926d60324abe74d7a4b571c35ea

SHA1
78b8f92fcaf4a09eaa786bbe33fd1b0222ef29c1

SHA256
7039ad5c2b40f4d97c8c2269f4942be13436d739b2e1f8feb7a0c9f9fdb931de

SHA512
f5b6181d3f432238c7365f64fc8a373299e23ba8178bcc419471916ef8b23e909787c7c0617ab22e4eb90909c02bd7b84f1386fbc61e2bdb5a0eb474175da4bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
756a90254711d8833fbc594f04b2cbf9

SHA1
9de3440d318442be278c01be5976fd3154fded4a

SHA256
ca5ec0fa6d149af689a60608a568b88cd64627aa480748ba48f7acf741dbee41

SHA512
5f0a77bc0d6421c7170d336f8ffc3189824d9808748374835736666913d4d58a498b846606160913a7acb6c0c7866494791fc428331bc8b692a0179b718be02f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
709B

MD5
80c862ab9a4e8828623f7361db69e999

SHA1
01e9637375fb0132ccad892ea11fadb0ecb3bcb6

SHA256
a462cca7561e82bb96fc9b597f88bc09bbb26593b61c335b60545985ed1dcc5d

SHA512
19f97befe42b851babbf8df1ebeab8de32ea0a583d04949dae9dcaabf4003d0dea13e9a0727cf13f1880abdd2f850c4a5a1d86878e61493604710fdaf8110d05

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7a292965a15404f14a67ec4a280f6638

SHA1
37b40367bbcb71a7a765782af4d2bd742753165a

SHA256
95867050e7cf216d564542649d3ca21a207654511a0b5c3bc1f87fb3a8228d9c

SHA512
24f4f36819a7112072fae20b03d1f3a284dd017bc8caec3540356653f94aaa59680e05281bf5f0389289d00e11fe2e262f924377ff3e730044b1f65a3a48f643

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
df1f5cc7ff212acc8a064dbdbbf33d2e

SHA1
1aee2fe5b0027a2c809fb81988d9697c3c13411e

SHA256
5574ccac1ea0b3486e18aed86a2e0be160216ac339063a3585b64142c89ab183

SHA512
467855b618a3ef3f4de9a364f2131ef301954fc45506e011a3095b439b6ef708658620a1416108c7ba4b230cc5e1bcd9af1831e0f253a1be656010f6e6627655

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
20389580383b080894ae75b62077e0fe

SHA1
1a447cb887adb8b4df3b8bdc1114f022188a9b0e

SHA256
67b5b58acd9028d03e5d714796bf75562609c67ff9f143c0892e8a68a8c0a1e3

SHA512
e04a2a9a8afacbbb2705a74184aa67bd487ecf329d63f9ac41cb53e1ce70dfa5dcb3a3b0457952e47c504e6f309ee3177a8c924d3e1bbe0c70947cde1bf8a593

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
540B

MD5
32acd2b37d0382e5ff2ff84a4c9bc3b6

SHA1
3a0cb635b88cc503c27c6b05b12206d3782fed7c

SHA256
ddbf72479a075dfb3811b4d09114e112dd0247f4953f3fefd473614f18d4f179

SHA512
d7bf4b765c62d4c151dfb9992228d86392c1b2d716193295d62ba86c395e80af433f82765934097c868842ac0e2ec5b8db50a5c26d220e06ef822dcfb7d8192b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58a0df.TMP

Filesize
540B

MD5
423e8b3c590ba1c1e6b9532f963a6af3

SHA1
855584eebaf48b3b8e20552504568e39d6a3f3f7

SHA256
08e3207619897d7e08147a1f0a1e5f45f7f8f0fd4747e5b67896c227e36874b5

SHA512
e73a760add70990d49054d61da4dd1a404fc7e358b56b9770f3eb28c69913e2a29780d9dee07356a87b9e97d5b1fb2cfde9b7916b8d0f8f54a8d4030aa8bb01c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
5380424c05e5419e9151b14c186b4d9a

SHA1
0059131dbc46b5e9c9c2fe86d4d4d70c2e062ec6

SHA256
cc70aacfa35a0350c3c7537ca26ab8e21b30e36fb93145c9398fa223553d5aa8

SHA512
9f585247bcf937dac9fc4b99f1c2e0dc78251f7b0b2b7c1fc97287e958ce2ac86cc9c750cff47b324105da632e21a4eae20e3c755add7b356e17c65e533c3265

Download Submit