4128cbc5121f1d47541cb68b3025f56d64a0c920b0a06b3da438110d49ab4743

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
30/09/2024, 16:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

023e6a3b8d97ec4f658403fd29a08b00_JaffaCakes118.html
Size

432B
MD5

023e6a3b8d97ec4f658403fd29a08b00
SHA1

64e1dadce337033021d6725eb0a8dddbb565061a
SHA256

4128cbc5121f1d47541cb68b3025f56d64a0c920b0a06b3da438110d49ab4743
SHA512

5b874a074afbf28c88e63c1dc13ce4d4acfd2f2186ece623c74880edf6da21ca3bf7f04965af9a2a5a04c5dc04e882cbf55884b5554c5e46aa01a8517f2d3e35

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2200	msedge.exe
2200	msedge.exe
752	msedge.exe
752	msedge.exe
224	identity_helper.exe
224	identity_helper.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 752 wrote to memory of 4952	752	msedge.exe	82
PID 752 wrote to memory of 4952	752	msedge.exe	82
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2328	752	msedge.exe	83
PID 752 wrote to memory of 2200	752	msedge.exe	84
PID 752 wrote to memory of 2200	752	msedge.exe	84
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85
PID 752 wrote to memory of 2152	752	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\023e6a3b8d97ec4f658403fd29a08b00_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb062446f8,0x7ffb06244708,0x7ffb06244718
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:2
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2708 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4932 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:488
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3912 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,3814093291735278944,10472025077821890829,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1788 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4872

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4104

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5068

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
eeaa8087eba2f63f31e599f6a7b46ef4

SHA1
f639519deee0766a39cfe258d2ac48e3a9d5ac03

SHA256
50fe80c9435f601c30517d10f6a8a0ca6ff8ca2add7584df377371b5a5dbe2d9

SHA512
eaabfad92c84f422267615c55a863af12823c5e791bdcb30cabe17f72025e07df7383cf6cf0f08e28aa18a31c2aac5985cf5281a403e22fbcc1fb5e61c49fc3c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b9569e123772ae290f9bac07e0d31748

SHA1
5806ed9b301d4178a959b26d7b7ccf2c0abc6741

SHA256
20ab88e23fb88186b82047cd0d6dc3cfa23422e4fd2b8f3c8437546a2a842c2b

SHA512
cfad8ce716ac815b37e8cc0e30141bfb3ca7f0d4ef101289bddcf6ed3c579bc34d369f2ec2f2dab98707843015633988eb97f1e911728031dd897750b8587795

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
343B

MD5
b6622528cdf558d8cd951efae72671bf

SHA1
cb368bd7a72a47458aa77477addd4ed3a3693dbd

SHA256
20cc8f40b22de076208d755b5dab38a2fa253cbb679cc6931b56cada50b7ce5b

SHA512
2d1fc64f5384b93280d702e26a029dc219ad5a2837f8176a2bea8c0d52b3b9e7f64cf49c996710473dc809539651c895c0727063f357a35f70c4e304129417c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
0e0d3ae4c3409822292499944e88b42c

SHA1
29b681527819b4f8de6beaa3a964f4e9c48554e0

SHA256
74111e04099e83e393783903cb8842a9261832199bd54d18a63e3e14ecde9c2a

SHA512
8dcee8f8be0796c2259687f414a2adb99b66a6c862211b01b677464b5071a19bfa5aaf437390cbab553139a311d33506817e3b30ef55b3a0a00b0a1ccaf10eba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c2ff324d1696a4de4b1f98ddb2479533

SHA1
12f127a11b3d1d3a23132fdb2e036a05781487cd

SHA256
8178b18a25de6e9afc40bbe31d6c1ae73bc4113434246895f6017675b0cf5fe5

SHA512
26ba85ca2e724efe0edf63f5d9095bb96b1e58e9d04d395ab11207cde6a4b1d7f2fb6d6c996e66b3c944a2a21610af074c20de19dc5de8b9b4ce492a45388b74

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
a5a37e396e1407e73b5ae7e4c29ba410

SHA1
afacfc22a2320fada432412e718840771328e07e

SHA256
51f28fc69df601e38a43dad0ae38a1a1ce6bf85fed0c97c7fa2612ab75de5f49

SHA512
a1a23711d3c1a04fe303aa7086ab2f59a5c1b15ee7e4159c139ed6ed508dd17ade57ce11a01d14be0f9310a678e9433118a0b53000800b046b175e0e213d028b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe63ed34.TMP

Filesize
48B

MD5
99119256992e7bd0c3379c8d284f0ff3

SHA1
8dd17edc8671b76909a13033992d5c269c8ca4bd

SHA256
79d8f0b31b97c85d95bb98242adb23c5be05218867b5379cfbc10f19d5a9b28c

SHA512
51a1ad93ae80c9e6f3386dc425d723fa22dba4d89a1257aa04328b6af9b14ad06f4806080664f69f223741a1673eea6baa1550f0868ab075a3c33d48b808eef3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
4c7596c0ebc26de6bf486708db8b51cb

SHA1
7982993649a102a517a876aeab7dbd01428dc047

SHA256
81b27386b8dbfe2a077e0312e422a88a9bd9dd2fe5726b93b800fa95b2e7918e

SHA512
aa27e0fbcf2fa48f761124e1f2d6775b717b2ff243c0a905fda85bb00a6d17a5d31590326c85be32175a9385186881f8ad6114da1693e8b2b784098d57158bb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
a37a53b3b3d12e948094284831e068c5

SHA1
04efe5a68abdb1fbc4fafb366650557df6a0b37f

SHA256
2c834a5dc6c418d33f35d7a95b93e78b4487ff97935d6d1b7e607edd7ee6d134

SHA512
f950895965e4d4c4867dacf0957683be044faeea307280a7596cf6df315482b8a9c8d08882d08a678e5de5334991510adcef95ec6a6841bbda287ba620608ede

Download Submit