af229151c23eaf9b8c2a35500a6c3c41a64ddc26fc05e1238ee7e2d048bb76e5

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
04/10/2024, 17:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1456266daa2eee5369f24c06047e6f7f_JaffaCakes118.html
Size

47KB
MD5

1456266daa2eee5369f24c06047e6f7f
SHA1

a5125eb04d0b557b0211315eea3ce24d51de0940
SHA256

af229151c23eaf9b8c2a35500a6c3c41a64ddc26fc05e1238ee7e2d048bb76e5
SHA512

620a1e509b89043118209358f543b530ab861fde427c5ea1f0fef20b5af72f184ddae5f10fad00cb075990619fe9edf29685c2258b7e6a7552c106eefba4bad4
SSDEEP

768:zNNIpGKHbpALQyGfAaPamihB/ntdbxpj4lNQIHyemzj6tmK6B68Kgaf02hN3vFRe:zNt3LktarBNpjdcyemW8B68KgqNfFRV4

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
1756	msedge.exe
1756	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
3868	identity_helper.exe
3868	identity_helper.exe
6084	msedge.exe
6084	msedge.exe
6084	msedge.exe
6084	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 212 wrote to memory of 4556	212	msedge.exe	82
PID 212 wrote to memory of 4556	212	msedge.exe	82
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 4692	212	msedge.exe	83
PID 212 wrote to memory of 1756	212	msedge.exe	84
PID 212 wrote to memory of 1756	212	msedge.exe	84
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85
PID 212 wrote to memory of 3392	212	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\1456266daa2eee5369f24c06047e6f7f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd8d7d46f8,0x7ffd8d7d4708,0x7ffd8d7d4718
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2020 /prefetch:2
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2480 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2900 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6900 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6900 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6580 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6396 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6668 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1772,16293546944118261131,5066752338040336834,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2832 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6084

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2148

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4484

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
5927771cb1cdf3b6b0484a446cd736d9

SHA1
44821c211dfc5062d68f3c4b756566b920ab8a7a

SHA256
e76b402f410fafbbddd09e2df9daaaba065d2a97396c238711a7dc717aa36932

SHA512
fed5203fdd812fd9edf4163293811cb3e387c1b7c2676156f66334b597c5df88ead5a8e54fef1c6c855235b8e6681e8df5ebe1449f9f46e1dd14f988dbd7374a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
c21ac7458e87bf139c2da072d8bec8ca

SHA1
651355d39f23600173bf40a3e8fff833bd57b946

SHA256
a77c44c6c591a2ebf2fb5189675210a22132633df9fae2206093cd0a8b86fd8f

SHA512
0a2ef3b634f5e7e52927e2b99f467b2ed817ae580ded6ca75ba4f5064701c58e8e5f12b73435ec20b94725c1bb060ac245aa6634e26bdfc11c142bb42815c418

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
fe358e5bc8f39a9ecbe72174707d07e1

SHA1
f1f455fd14299cf8b65769bd3241a4ea4a7d911d

SHA256
9321c5a8b1a299ac173817eafb1ca41fc7b73af428e0d8616f20d2ecc745ff54

SHA512
f40dfa363876a359764bf56a43c9ca7c15ab79fe694a0e9ff5f3fa8ce705d2bafcf4d57e0893c898cb55ea9c3a434e3a189b073950b5a4e5aab9575951738542

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
66f94797eb77790de760e2dcf9db6752

SHA1
eaa27ae785ce81e3ddffd2a037be07bdddfc670c

SHA256
5970194ca04ae1c1cb3570e9f119cfc7a54252af6a351fdb8731426a280bd0af

SHA512
b9b1c9315ca16f0ab45fcaa1d4af41601ac44a28379ac5d59c1d79b31359b94d7d55abd40a1c4cd59098289aee96a25aa4f056cbc2f69cd9189c1107307468ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
baa12c167fe99900ee5b54a67cd42de7

SHA1
d3c22635e6b83073114558c142de7c437738d4b7

SHA256
6af3cd358339917b23a636ccd66335fc6b007cba2d3e11ac512f3134b509dce4

SHA512
3c94fbf118a86b7deb36eca90311b1455c65f3cf4622c61522e366cf45eaee45012712afe9d599e71ce609d44c881a964142463d36ef671205cdfcee2bbf151f

Download Submit