e538b8d455408657d2ca5c2124a6419477e776a751336d5b68b81bf5bdb8bdda

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06/09/2024, 15:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

cfd8f1ccb06a12e1a748ea2cc3308670_JaffaCakes118.html
Size

48KB
MD5

cfd8f1ccb06a12e1a748ea2cc3308670
SHA1

6598b3b8ca9daf964aa253b67d8684536a1a9d4e
SHA256

e538b8d455408657d2ca5c2124a6419477e776a751336d5b68b81bf5bdb8bdda
SHA512

9e7797a63d77cda7ff2995ec657861fb21b3e79f68eb7807885885c704467aebebed30c5148841fd5c311549583a68bcb71e2d7dbbfb42cfa1e571ea5fb29852
SSDEEP

768:V/Vt97Rycy2aWzkHa3Z3MUIBTSaemAELdjqckF8SC0/ZuOU:Ht97Rycy2TD3iLZSaemAELdjqck0b

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4728	msedge.exe
4728	msedge.exe
2360	msedge.exe
2360	msedge.exe
2192	identity_helper.exe
2192	identity_helper.exe
1860	msedge.exe
1860	msedge.exe
1860	msedge.exe
1860	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 3520	2360	msedge.exe	83
PID 2360 wrote to memory of 3520	2360	msedge.exe	83
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4420	2360	msedge.exe	84
PID 2360 wrote to memory of 4728	2360	msedge.exe	85
PID 2360 wrote to memory of 4728	2360	msedge.exe	85
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86
PID 2360 wrote to memory of 2388	2360	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\cfd8f1ccb06a12e1a748ea2cc3308670_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff889ca46f8,0x7ff889ca4708,0x7ff889ca4718
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,9563900467411356793,5296580856344869667,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,9563900467411356793,5296580856344869667,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,9563900467411356793,5296580856344869667,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2888 /prefetch:8
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9563900467411356793,5296580856344869667,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9563900467411356793,5296580856344869667,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9563900467411356793,5296580856344869667,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:184
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,9563900467411356793,5296580856344869667,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,9563900467411356793,5296580856344869667,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9563900467411356793,5296580856344869667,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9563900467411356793,5296580856344869667,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9563900467411356793,5296580856344869667,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4100 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9563900467411356793,5296580856344869667,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,9563900467411356793,5296580856344869667,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4764 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1860

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5048

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ff63763eedb406987ced076e36ec9acf

SHA1
16365aa97cd1a115412f8ae436d5d4e9be5f7b5d

SHA256
8f460e8b7a67f0c65b7248961a7c71146c9e7a19772b193972b486dbf05b8e4c

SHA512
ce90336169c8b2de249d4faea2519bf7c3df48ae9d77cdf471dd5dbd8e8542d47d9348080a098074aa63c255890850ee3b80ddb8eef8384919fdca3bb9371d9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2783c40400a8912a79cfd383da731086

SHA1
001a131fe399c30973089e18358818090ca81789

SHA256
331fa67da5f67bbb42794c3aeab8f7819f35347460ffb352ccc914e0373a22c5

SHA512
b7c7d3aa966ad39a86aae02479649d74dcbf29d9cb3a7ff8b9b2354ea60704da55f5c0df803fd0a7191170a8e72fdd5eacfa1a739d7a74e390a7b74bdced1685

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
475B

MD5
33df03b6e45a7d002ab5f0a9ba11085b

SHA1
d413ace5ada59e6a467eb60a820131983600a8b2

SHA256
6fb0ee78ed339ac203e5ab692aa0dc471ce94bf60b4d14144b5295e75eaa3503

SHA512
fe8ff58ba0ba72544dd04d6d6133f73f43ca7be6afb3b31819e467bdb320370d1c43097d512a7250720525a3d30e4416e0eb0717b17750eb358a0cad215be1d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
dfd015b232643ff9676ad602bfb47515

SHA1
4b0126709db844584f0cc9190f55b572c68be724

SHA256
8e8c9946ed3a97a7bdcdbfd463c34861df46cca1176622a015d4726b0e0c1be9

SHA512
aa63af5238d127bd7362d9ed4f56922df11ca38aaf4815762ac48e2847972a5ecf76bf24af628cb9832edc475c41c198e5585ba6e0ca2ed5fa2330866aa802b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8aa8cddf46fc32fbbfaba77d7f43e811

SHA1
b0bf52324c81a0d2fb5d26b9fdd3a24be916286f

SHA256
df66e58645f3ab5fe12b3df5509652be43b5b785f308418e82634e6b26da5c35

SHA512
598c48a764773df927d5e16b56b78b5e1b8bf8b72eee032504c961633f86f0b8c0466bfcfe863b0ff002bbc69bc686de75855b443f9518f352bc6f3ffceb3f8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
01f53e671c5653b10b4c8ee04a131e7a

SHA1
9324bb84814cf93f1bb46a294d756fbe1055c69d

SHA256
e0c45659bcade28f709d06024e04e9ad2032a3105e52124c7811b64341bb8c4e

SHA512
ab19694dc4a95e5f7bd039281e8f232abb2bc30fa97bc3e35c5763f1d09cd83ff1ea8710e2498e03ed4154f70700a0ad3b49d42912dba32914d8ae913f01483f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
371B

MD5
f3f8949d59429ea9df4ae34549c8afc6

SHA1
1a94317715bad8763624bdd33b8c6eac77ab8eba

SHA256
dec35278b9b227e061a41f1879faccfc5be4a0aa85a9262e2969fb76b16447e2

SHA512
82822608bcbb86119086c111173f7a40798dc28b34214437988e23fd1be63ac0dfe8dbf21a7d48373f605878bc77154750cc981db2f19dd4fbedf51f5bfa34fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581057.TMP

Filesize
371B

MD5
63e40c85e9f9875478d9948c45d58ea2

SHA1
97774d692346a4935c770d3ffb1498330da8aca3

SHA256
3dc585f0ad792ac3bcb2ef2c9c7291155c2206869d45f934e9143ea09777a01b

SHA512
a2154ba0eea158811109910e21ff1225449973da5aaa4407443fd4d0ddb3d7351aa3da959ba38001d232093a7a58ff851346420366daeaf91d84436e62964d60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
65b3e209b007d063c616704f8b345356

SHA1
99975bc9faa8bcc7b944aa3a469f58a1f592440b

SHA256
52b5f3d9fbdd5ecc9fbb6e0adc697ca15b5d4c9ce57b931d7173eff756e65e44

SHA512
4cf3836cf3380253707779d708048cf76f2f4d2ac92e8bc3ba6a2ddb7b49a0513ab39bc9daa7e35cca961cfebf3982be89cf64f5f9bd384b156947bb987b6ea7

Download Submit