10a8962cc649b3b267d483e8e1b979f47622203e3de352d0cf55ac7fe5c3880d

Analysis

max time kernel
146s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2024 06:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eac48e434295bb402247763b6ccd6c12_JaffaCakes118.html
Size

123KB
MD5

eac48e434295bb402247763b6ccd6c12
SHA1

d06b06ee54ce7bc90a6e7e327daf15156625987b
SHA256

10a8962cc649b3b267d483e8e1b979f47622203e3de352d0cf55ac7fe5c3880d
SHA512

5fa17d8b00b5f1af369c8d09aa2dcf4011fc6055cf0447aff190b58d5f71df9c689b7d234395bd333c424bd66981c9486f460807287ef6a3438181dee327065b
SSDEEP

3072:eDV1eoPnz7Np1C+4/aAXt8hX1BD4dUPdJsAABn2hENvy:JoPtp1C+4/aAXt8CAA8J

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4808	msedge.exe
4808	msedge.exe
2924	identity_helper.exe
2924	identity_helper.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4808 wrote to memory of 4440	4808	msedge.exe	83
PID 4808 wrote to memory of 4440	4808	msedge.exe	83
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 1088	4808	msedge.exe	84
PID 4808 wrote to memory of 4968	4808	msedge.exe	85
PID 4808 wrote to memory of 4968	4808	msedge.exe	85
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86
PID 4808 wrote to memory of 2900	4808	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\eac48e434295bb402247763b6ccd6c12_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8b22a46f8,0x7ff8b22a4708,0x7ff8b22a4718
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2728 /prefetch:8
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3156 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3168 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5312 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4100 /prefetch:1
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,94719888599824190,6388843735951687204,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3984 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3932

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1872

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4780

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3936

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f9664c896e19205022c094d725f820b6

SHA1
f8f1baf648df755ba64b412d512446baf88c0184

SHA256
7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e

SHA512
3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
847d47008dbea51cb1732d54861ba9c9

SHA1
f2099242027dccb88d6f05760b57f7c89d926c0d

SHA256
10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1

SHA512
bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\26c2bbab-1012-4493-b0bd-3f07c24fd05e.tmp

Filesize
6KB

MD5
53544458db962b016b3b910007ca98a4

SHA1
a0b6da9659d9fce7dcdad094527d6fb035caf409

SHA256
5b8bc93f99969b04162466f0be65609a9d3fb4cdd6af7b8c85ec65f69abe924c

SHA512
c542f0ed6230512509e168d99110b15e748908d7f4f5cfe4f646a1f9d6b3fb7962501f16cc1be4b2831bc80bc529c5efa52eefd2b6396e3f3009a40bbeb5a748

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
ae9cb80516da4270ba38f973a2e248cf

SHA1
aa783f61df76fd4c5d44694fdaae8cbbdfd0c773

SHA256
b1fdfb12324737bccd7c9deafdd52bafba0a428d8b35c95ea24128031e26b3ce

SHA512
35f7b83229fe586be11d064e9808ef6eaf1ab4ad33fafb46a248f9ff8c4e9db9921387b8ca376625c567143710b435fb42f81ac345142cb322410bd78d9a36c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
9d83656581a9892bd95f011ad55c7547

SHA1
a61d36d3f1b89d07daab0f5db0afe23d75bb61f3

SHA256
035652345e9a831bb8eacd967aa2eb13e5108a6530878108a9a0fc202d103153

SHA512
63399683b9bfc0fc8252f649737f39f891ccf9c6f3ce7a2edd468bdbce2775ddbc60f843a313417b4c760fef055ce3cdbee8bb92583bfdc0caa21ac89191fe8e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
af38d1e7e40bec8a6d44136da7562e8d

SHA1
71246022feb756a0f09904f8f4604396a6999f6e

SHA256
027d91457c0afd1912aca5587017c0191273277bdf1e9217479ea2ced74253ef

SHA512
717bc240c21682af6d6457af939552e0d157897166b2572d0bb0b08c12e89e79e4dd3f2b3c3b49f1f02059e96f7bf11758ffe585ecb3a1b7f39988e27117f18a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
536B

MD5
53c400e86640533115e21cea640d4466

SHA1
eccb95401621e41c0c80e93b26702bb5ac9eebe8

SHA256
ec83beeff774cce1c217282a63e4b14ab01ef610468f3a8e6fe84f1df4277a87

SHA512
e9238977e23d8a9c8e9d0bf2ca0e83e2e7a00432e0597b47e43d915394ddcff0c87101bd285e56a52da89ec2bc6279551c9f4ae70150fd5c86d5eb754ec57976

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5813f0.TMP

Filesize
201B

MD5
00410c7e24ad24f2fef35c96d3f98c98

SHA1
6a83d72a0f3c4dcc8ec1377ab1267fe2b940e9e7

SHA256
c5068634eb60cb5bd573b858b252c090a55d02a0e9a956ac1c30d1fa3d2edfbf

SHA512
5a40d8a13cbb1931333ff92c0ef85eba348b93f58982c2683d0409048e06e9d0d8df71cc3f27da8a171cda6caa78b58e5a5b41911669965b6411ef180a316148

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
9f997ca5f204f7f3f46ad7d3263a9a74

SHA1
23c76b275d024778fa539d87ef7b4c36e8fef255

SHA256
40e3497db68d2b58119b626915399c608c80a2bc8e5c1b02dfce19156643316e

SHA512
8a5038e2609fec4652a55b03b5777cf38c5b5c250bb59a66566d948ff496c8724bdf075da1ef50345575d08864b6527021dd784aa5178252522f59b5aec33302

Download Submit