76cb066a7d82c83bba4148acf7f5d07c8f32e64a70ad4cd562d6197e58cb19e3

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
20/09/2024, 22:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ee9401038ae9397d08058a67622cfdf1_JaffaCakes118.html
Size

52KB
MD5

ee9401038ae9397d08058a67622cfdf1
SHA1

9ba908935481e80dc3bf37ede4f493d3430796ef
SHA256

76cb066a7d82c83bba4148acf7f5d07c8f32e64a70ad4cd562d6197e58cb19e3
SHA512

6aa74f493cb0cf664f0806b6ed7129de29441871701088cab8563d40236e2296fd3525651c87a1fe39af2b7bbb8633878d18520cf6a58652cd29a21fe4454e76
SSDEEP

1536:O85MnY46h1yA9FxHbdi1h5Br+QtZzcvWs:HLx7di0J

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-355097885-2402257403-2971294179-1000\{42BC8E62-0BC9-41AD-8A93-71DCEDA5F872}	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
3744	msedge.exe
3744	msedge.exe
1960	msedge.exe
1960	msedge.exe
3432	msedge.exe
3432	msedge.exe
4816	identity_helper.exe
4816	identity_helper.exe
1432	msedge.exe
1432	msedge.exe
1432	msedge.exe
1432	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
656	Process not Found
656	Process not Found
656	Process not Found
656	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1960 wrote to memory of 3604	1960	msedge.exe	82
PID 1960 wrote to memory of 3604	1960	msedge.exe	82
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 4820	1960	msedge.exe	83
PID 1960 wrote to memory of 3744	1960	msedge.exe	84
PID 1960 wrote to memory of 3744	1960	msedge.exe	84
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85
PID 1960 wrote to memory of 2824	1960	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ee9401038ae9397d08058a67622cfdf1_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe26cb46f8,0x7ffe26cb4708,0x7ffe26cb4718
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2728 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,16314518092584295754,3424818266992769566,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6064 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1432

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4280

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e4f80e7950cbd3bb11257d2000cb885e

SHA1
10ac643904d539042d8f7aa4a312b13ec2106035

SHA256
1184ee8d32d0edecddd93403fb888fad6b3e2a710d37335c3989cc529bc08124

SHA512
2b92c9807fdcd937e514d4e7e1cc7c2d3e3aa162099b7289ceac2feea72d1a4afbadf1c09b3075d470efadf9a9edd63e07ea7e7a98d22243e45b3d53473fa4f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2dc1a9f2f3f8c3cfe51bb29b078166c5

SHA1
eaf3c3dad3c8dc6f18dc3e055b415da78b704402

SHA256
dcb76fa365c2d9ee213b224a91cdd806d30b1e8652d72a22f2371124fa4479fa

SHA512
682061d9cc86a6e5d99d022da776fb554350fc95efbf29cd84c1db4e2b7161b76cd1de48335bcc3a25633079fb0bd412e4f4795ed6291c65e9bc28d95330bb25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
465B

MD5
08233258c93b6320b699b8d0f9a96d5d

SHA1
201405c248439a369ef796e89f984d5d9c40ec70

SHA256
71595b70ded321a8b93268562791c83d53efcf418bfe8a168ee85e22e43137f0

SHA512
47623cf6fd0d33fc462f19950a8ae9a7c13c72feb629899d64efab708b7336b02c44c3b1c7b9f867e0fd6ab81d4900b6d18ed13e5c30650a8970d37d5c813f52

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c7966736cb6ede6b44e77aded06fbd21

SHA1
7a4e4b7775dfe52519c61d5661bbbd7af0181cbb

SHA256
5f349d7bd24cd86705768885bc110f69c0b8f2b6bf3e369dc90f04672c2db152

SHA512
be2721a3f2176367cbfb1d4c2a006882d2e31eb48cfe25f2b66007c50b0c8b497f76814baa5877be05050a9dbca336d45dae6846c4c62e5b7a9217f253b886bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
191de8711b929175b5895890e7c3c56c

SHA1
0349347eb3583657405141cca9220b2353ef062b

SHA256
53568b5cd51079369666dc1c535777e2d7a3e6ba0301b15ece5949e22de1da59

SHA512
ff808014a2391bb8b64611588f24f4e735b98a046d32366b5b86e5f64694c39445fbc926798b84e898d52417ab90917296c9bfde59e9b180e5f4d64591eb32fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
372B

MD5
f0a962128cd2ef02fffa934413d2ef09

SHA1
f7ebabdd624663222fb16c0e10c72d69c8d4fcd0

SHA256
bef79c2ac22a1ec1596c092e0c74e98ea7c740678b88c473b2eadb6b9912ba14

SHA512
3f213ed79a199f54aa319dcac793ab5b105df34a8635b7c52bb459fea35c8869a44bcf4071f10188fde11a8a725dbfc4aff8dd564f54d9aa9528c30cd7458a7e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57e87b.TMP

Filesize
372B

MD5
be29aac434ec197f2299d25b63bd81b4

SHA1
b5c8f548857bc9d86664857165561d93f72675a3

SHA256
53da6e650d4abbd2166ee8b270e52f6b1f676cc58a865b1ddf83fc89c25ec131

SHA512
c0b0d00462a3ed4a90ea7ab67dac249fd75deef2dc29b2d2c5810e6af91b4be44cf527fb8f5f76f38e5405d479b8ba7fd1ae26552da97816bc391a8cf2f9ef8e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
a5d9a60e8612d71aba862b6c9668e533

SHA1
733b80d712dd77b0b97665cc09dfc9de6d2599e1

SHA256
f13efe390b7a826fc232ac29a05f2415092efaa43b24102bd1321f628b4dcfcb

SHA512
5fa1fd8dfa9de013261b1f4e6c68f59bef9bab8c6eb1e02b54d112eaca1f430d0be366f4a8fb5a6a07ac7e1c6136963ca2a4386877e73fce3bed334aee6aee84

Download Submit