4117d2d73aa243fae231d8a8b6d5372d54d4889e9596dde70be6e4ea7bb330a0

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
12/09/2024, 01:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

db8d1c9a32edfd6a755c8648d6585ad0_JaffaCakes118.html
Size

85KB
MD5

db8d1c9a32edfd6a755c8648d6585ad0
SHA1

f761d465f8e3aab5a4e684e385cac33441927b51
SHA256

4117d2d73aa243fae231d8a8b6d5372d54d4889e9596dde70be6e4ea7bb330a0
SHA512

68a8244303e5b84b59fe41229ddfecdf5c7456b8911577a7f0133d64bc425c90b04d0768b59ee32a35295d45c75e7a51f52df92e8e68dcc764c8dc112c2830cb
SSDEEP

1536:fWOrm46BlVOr3WQOoOeWgdLPccaw6E6z3K+IMz+5m5EwpoNJxtWdY0ywefYRkHXm:p6eWeprSwes5DcpjatZZ2d1

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1728	msedge.exe
1728	msedge.exe
2424	msedge.exe
2424	msedge.exe
632	identity_helper.exe
632	identity_helper.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2424 wrote to memory of 4980	2424	msedge.exe	83
PID 2424 wrote to memory of 4980	2424	msedge.exe	83
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 4116	2424	msedge.exe	84
PID 2424 wrote to memory of 1728	2424	msedge.exe	85
PID 2424 wrote to memory of 1728	2424	msedge.exe	85
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86
PID 2424 wrote to memory of 60	2424	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\db8d1c9a32edfd6a755c8648d6585ad0_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff540d46f8,0x7fff540d4708,0x7fff540d4718
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2888 /prefetch:8
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4864 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6028 /prefetch:1
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,1768568413380856236,14752289911197817017,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5012

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1440

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2276

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9e3fc58a8fb86c93d19e1500b873ef6f

SHA1
c6aae5f4e26f5570db5e14bba8d5061867a33b56

SHA256
828f4eacac1c40b790fd70dbb6fa6ba03dcc681171d9b2a6579626d27837b1c4

SHA512
e5e245b56fa82075e060f468a3224cf2ef43f1b6d87f0351a2102d85c7c897e559be4caeaecfdc4059af29fdc674681b61229319dda95cb2ee649b2eb98d313e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
27304926d60324abe74d7a4b571c35ea

SHA1
78b8f92fcaf4a09eaa786bbe33fd1b0222ef29c1

SHA256
7039ad5c2b40f4d97c8c2269f4942be13436d739b2e1f8feb7a0c9f9fdb931de

SHA512
f5b6181d3f432238c7365f64fc8a373299e23ba8178bcc419471916ef8b23e909787c7c0617ab22e4eb90909c02bd7b84f1386fbc61e2bdb5a0eb474175da4bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
c97f51f5b21404ff1e3bd978e7d204f6

SHA1
b5328ed1b796cb9b77ec9310a87e8aa7f76fd05d

SHA256
0e36c659f04f61deff9d6430a8dc798311ca5f6c0fcfe7c356e97ca764ae9947

SHA512
35916411dc23d255baf61feb3020732cc325d328509e9e67a67a4ecb0700ab37fa14e1d130f55204c4dc534216426f881de198a2628ba61401b15afb234ae49a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
f39a4b832cf038e937796ef8a840d4e0

SHA1
877b83b49001e7f02a6367b55361208760ca564f

SHA256
1cf74ad19cd089a981d1fdd72734ecf55e620cf10eeb8fc999d69d0ce3f7b878

SHA512
39392fc1a35ab49fc6d2843d56cbea73085a348d1af550f8c025ea5896f53f9cc77386981f087db5c1f488075fb30aa5d2053bd3a40e6f2848b77d35717cee0f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c1c7b5f5251aeccd0510f9799167d29f

SHA1
c550fecfd9d6686f1aedb7c9217af7c964f0fb82

SHA256
30088125034559b006e51189e6b86a5bb8c82e76e2d5b4ad090873b866d34147

SHA512
8077eb87319a77b079eefea1750c2e90ff3a97bdb938485101f9a88357a2f8d5a35de8ce95f7b575116c49c7b7edda5f29892d439a1b957de1fe12b0a4e4c779

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
ad9ae9b4b90e4cb7c3201fba78872a6e

SHA1
37250a1611a2feafe008d646e691951d666eedad

SHA256
a2733123e367f1fb2ea320223f1777f4a71524542d893259e596eb06bdf72fb4

SHA512
c0dfd68d7cb3b5649a447eecaf862462004c8d5a26ac833271dcb670fcab0f19d2159a91858c21444c86cd923bc6f9c5359c065a6377dfe95bd45cb775882b13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7acf04a355ca5a874a0a7c52c3137aad

SHA1
72285897e9aeff2ac85418aa53121d9b3120c940

SHA256
06fd5f83605920c7ba4341c106e5b9387738033f74ddaf2a48440de86b62250e

SHA512
395be600796b0f8b3b735b5b11d73b33076a99ce0e84b086b5d9d7af4d57d74445020273d4765a76e428134fa9df13f91632f1db3741377c671ef4e715dc756b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
f7ade49e7cacfb9e3077684202d7a8ea

SHA1
7a20615e571763e9cf07eee4f1d4375fbad26b58

SHA256
6eb4df29a9eeb9c9ca6ba61049e4fc51cb121c2916d93885b316abf9b411cd35

SHA512
131016876be6f86702d3c8f79dc5137ccf071bba31dfc245df978e2fa3b5351beec2cdf2a679249847f6e11becb6e2828e149f07adae4cf29d7010fca609e723

Download Submit