657d938c6c826ef1225520c6e9afe8894b390f01cbe661124d19900c31ce66d3

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
08/09/2024, 20:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d50c8de8700cd5dc4c9ad5b2aee48cfe_JaffaCakes118.html
Size

13KB
MD5

d50c8de8700cd5dc4c9ad5b2aee48cfe
SHA1

545fb86378af8b56efd22880e3efd8c1a8d9a840
SHA256

657d938c6c826ef1225520c6e9afe8894b390f01cbe661124d19900c31ce66d3
SHA512

5198033d23cb91a77f0477a898da6afd2febbd40c012a6f2f8bf0a5fd19c7d99017f728fdc6a9e9c5235474d63848b58d2b5692a5213ea24f285b1e6841d68e7
SSDEEP

192:VsP6TtRpUP+3Z5S1+vgBHoc1+71+R/pR9ryrsCvbHr1p3+FLh0Y17G1Uh:VsyTtvsE006HhW6VyICvzrbH6

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2952	msedge.exe
2952	msedge.exe
2624	msedge.exe
2624	msedge.exe
3324	identity_helper.exe
3324	identity_helper.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2624 wrote to memory of 4876	2624	msedge.exe	83
PID 2624 wrote to memory of 4876	2624	msedge.exe	83
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 3168	2624	msedge.exe	84
PID 2624 wrote to memory of 2952	2624	msedge.exe	85
PID 2624 wrote to memory of 2952	2624	msedge.exe	85
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86
PID 2624 wrote to memory of 1344	2624	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d50c8de8700cd5dc4c9ad5b2aee48cfe_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9c8c046f8,0x7ff9c8c04708,0x7ff9c8c04718
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2704 /prefetch:8
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4076 /prefetch:1
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,8679372062577568369,2036570813199174962,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5420 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4328

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1884

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4396

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e4f80e7950cbd3bb11257d2000cb885e

SHA1
10ac643904d539042d8f7aa4a312b13ec2106035

SHA256
1184ee8d32d0edecddd93403fb888fad6b3e2a710d37335c3989cc529bc08124

SHA512
2b92c9807fdcd937e514d4e7e1cc7c2d3e3aa162099b7289ceac2feea72d1a4afbadf1c09b3075d470efadf9a9edd63e07ea7e7a98d22243e45b3d53473fa4f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2dc1a9f2f3f8c3cfe51bb29b078166c5

SHA1
eaf3c3dad3c8dc6f18dc3e055b415da78b704402

SHA256
dcb76fa365c2d9ee213b224a91cdd806d30b1e8652d72a22f2371124fa4479fa

SHA512
682061d9cc86a6e5d99d022da776fb554350fc95efbf29cd84c1db4e2b7161b76cd1de48335bcc3a25633079fb0bd412e4f4795ed6291c65e9bc28d95330bb25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
dd6bac7ad446c35807b040cfc94cbfcc

SHA1
0088ee0e13602e46337a8dc6b68cac7f21fc10d5

SHA256
f48cda45c81fdb4c065123bc2f5195f3150256128bffeb474b04d700049cd51a

SHA512
0cb43fbfce293379eec236f05085705c29b7865b678f4e327cfbb4c90919a7cda7e77ec11842640a43b2d5717a6645b6bdaf324887df510caa7e2feebfdc61ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
646B

MD5
41efc7b9b6498c7556a5b1d8c79f6cea

SHA1
74e59971c257607bea603313e1e51158c35b0400

SHA256
239c0a3b3627aab9c661d70f4485d026c6258f0e0dd85d55068d771fee209a1f

SHA512
f7f848ff73474abd833b04329425a87a1533a0e0da049a4cfd995ab4cae6695af52e38d2587f55990a3af919536ad31f04704ffd3ec40fa878c84b4608c6a557

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
614B

MD5
4d4ec95240226a731b98a0b3c395b95d

SHA1
1623791d3a3bb2d7ae4a255a6ab837d0a963047d

SHA256
51be10959dae0069f6bded7473fcaa1220fc6348d7cd497612ed70d0ecd4082f

SHA512
d065c030087b6df66c78f7aa5f3aab1e4700b653e5cd1cf1171234b9f88747f994525cc36756a6a0d1dcf248231351e633e6852296c73b573c163758a70a4b83

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
fa4f451413e7b4bb4dec4cbae45a2753

SHA1
03020b52f6dfd17f54bae859302fb7758394c929

SHA256
31a51fe131745c5efada60597278243c8d1ce5cc962bc7019f4744b4b295c10b

SHA512
48f456ed653131cce545c94a88f8d0a8e553c953f8cf2a6eb9d36a6272c0ecb303cdfaf10618abbcc6620eacc4f598110226a0b432fdbfb904e1bf4b2aca4528

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
bfa75c22a0d64fa46cae5cd8d4dc37ef

SHA1
678db3dcf3a835480a0babe4a1de9282be317706

SHA256
6a4a8720aa4ceba1010f65d5206fd03a4aa9d884d2a84ac6bdc4869a25565fb1

SHA512
907673648052b6491da835bf3991f7b0abbb121319d8de669be6c9f0e6c44a5657de6f17e0b29c759645b6a79d8dffaa1bed425b5ad53529a68bdce51733e97a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
70bcbbd0131fccf82cd1ddf58e7b30db

SHA1
5336b18fec128d74cb6049b16cc7b86bff8951c6

SHA256
a19e7c50256087449c8395a64875811e967df161709f324ec1a25eaec89b1920

SHA512
d732b393ac8c2e2a8ded396489ae1026838210ecbfe16cb7b00b29ecb7fad3dd08fe9bb25808585e8b614c2aeefa245618e06d66e36e46ea2c7fea5c5f14025b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
2c469c05c9d8396c89fbd8c73304541c

SHA1
b9d754d1f12bc60f8bf9d68b6093099949bd99a3

SHA256
01ebc2855053467618a6882c976460b7e7d6718aec49c81b54286d7f80eab2ec

SHA512
2c69a71a19a6fe40f2fd9e223fc9850f9e3e31910f9ab870d432decda3a40ad5e3bcfa517e07a789920679c810e8073ea79472434e2ab513bf1981d9b73b4759

Download Submit