70d75408f9974344d2cb69e75093897fff5c5a722cab30381b7c27035aad140d

Analysis

max time kernel
145s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
02/10/2024, 00:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0804aac580f5c5000e9cd6022df0dfbe_JaffaCakes118.html
Size

69KB
MD5

0804aac580f5c5000e9cd6022df0dfbe
SHA1

880aa3f259a821d81d3abbe6691b56fd1e1b3718
SHA256

70d75408f9974344d2cb69e75093897fff5c5a722cab30381b7c27035aad140d
SHA512

93091bb8884ec20316b5456ac9a4f57b935d3b3cdc064d4442378ccc3d61ad7b188d887c17909956f1a5f13bdc65aee54968a9aabf6fb965144f8129684ea8d7
SSDEEP

1536:gQZBCCOdJ0IxC4D+4M1J0uMrPgnOHVDAasNuHzMcP0Sq/Ce7tfbUrfbgO9Ggns1/:gk2X0Ixo4M1J0uMrPgnOHVDzsNuHzMcg

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2476	msedge.exe
2476	msedge.exe
2588	msedge.exe
2588	msedge.exe
3512	identity_helper.exe
3512	identity_helper.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe
2588	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2588 wrote to memory of 1916	2588	msedge.exe	82
PID 2588 wrote to memory of 1916	2588	msedge.exe	82
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 3204	2588	msedge.exe	83
PID 2588 wrote to memory of 2476	2588	msedge.exe	84
PID 2588 wrote to memory of 2476	2588	msedge.exe	84
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85
PID 2588 wrote to memory of 3900	2588	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0804aac580f5c5000e9cd6022df0dfbe_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xdc,0x108,0x7ffaba0546f8,0x7ffaba054708,0x7ffaba054718
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2208,17122222859708688342,8270693839480856311,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5288 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4964

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4048

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4948

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecf7ca53c80b5245e35839009d12f866

SHA1
a7af77cf31d410708ebd35a232a80bddfb0615bb

SHA256
882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687

SHA512
706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dd2754d1bea40445984d65abee82b21

SHA1
4b6a5658bae9a784a370a115fbb4a12e92bd3390

SHA256
183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d

SHA512
92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
213KB

MD5
f942900ff0a10f251d338c612c456948

SHA1
4a283d3c8f3dc491e43c430d97c3489ee7a3d320

SHA256
38b76a54655aff71271a9ad376ac17f20187abd581bf5aced69ccde0fe6e2fd6

SHA512
9b393ce73598ed1997d28ceeddb23491a4d986c337984878ebb0ae06019e30ea77448d375d3d6563c774856d6bc98ee3ca0e0ba88ea5769a451a5e814f6ddb41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
024d8d28ba96fc04c7a19031146e212c

SHA1
3a17814ed0f13b91b41b6fa273da3089465ff7f3

SHA256
68300a5ac948f168bf79b9e605580d21e8a08667176b36445d23f6f887e42430

SHA512
75752a9f699e957f71eb9d3d54fcdb9e46de9820df79f77c1d26e2b2aa67fc40033fb75b91cb58ae2b8f9939edbebf0e405ab1ab58eabeecfc27bf52e8aa1456

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c24869c09b52b3ead1266d7ae7390968

SHA1
37f605d143a24f9a2bb4bbefe3b5f2d3a877544c

SHA256
f86ceb7e9cd7efc83a308ba6da3994c8aa068d69a0f10d83a4ab34f7be520bf7

SHA512
35104924fbe7f00213de0231d1076c2346395ef8a30832c3cef86aee99ecc475571897d560b8b1a8a5a8e6bccc12b3b9ae85cc5b8f47a4a8f2c40453b8d436f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
9565f5ddea97b55f4a81cf0f3735a02b

SHA1
a70d8ec5c1466faa9b3a97262fa54739b43789da

SHA256
16765f88fa6cd563c79090139c2bce264a69b793b0ea0ead333cb526bdb588f1

SHA512
0d219c7aaed90cd3cf869f43314288d5a40ba6389da19a582a83161131cd8db9bf93e9ddf4788c7c84c6e2869817d4ab88ab5db7f48ec4ff756049a8cfda26cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
dc032b9e2b6dd838327ac647abb8e99f

SHA1
2f8dfe7ced074605d046d6d3abb520524e78329a

SHA256
a9458403e6e6a28074792efddfa20d9ce0487e2621980c3e1d81f78f02631414

SHA512
ef04e7ef33ac117a9d2a64f6d2517ea129376742ab67e14eefd325a971c0ec4a1873a3739713d5ea6c709f9a3b76b1ff535767b09feb49a4a114206d4369ebae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
cc6887e3f5192af914d45e8d88830044

SHA1
9af00fd35f4e701c8a7d68fbc7b9ef2b9f953705

SHA256
45ad46b6eea6983ea4c8144a08bf4b5f1528f2884b80b01a9ddcae3e570a49bf

SHA512
ec8b1ab8ae2a27d5a15e6db57bee4f6e78377f6a44cd6d76cfe10278c4085b4d3e8ddd71c3a47352239074fe41a3daefbdaa2b590cee9735e269f034b0ccc61f

Download Submit