7aaa6a22c5a89d6bd1830bcf8d35ff53aa44f8702ba9cd9f8c691ec82121aa64

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09/10/2024, 06:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2cd940b12e43251fa10e18cbdec02578_JaffaCakes118.html
Size

58KB
MD5

2cd940b12e43251fa10e18cbdec02578
SHA1

196731fce29b5f76a26b3989fe3a725d3cc3e67e
SHA256

7aaa6a22c5a89d6bd1830bcf8d35ff53aa44f8702ba9cd9f8c691ec82121aa64
SHA512

adbac861e096bf27c620189cdf77655839509e4f7ddee0785fed1516af9a7455183e70982c5d4ddbfd7811bf5f88fd8fb6773bd737b82f495bb2ed65d7af1cda
SSDEEP

1536:gQZBCCOde0IxCN3SRf6fcf4f6fzfEfifFfhfzfTfXfkfcfAfRfXWfVfQfUfpfofF:gk2w0IxXi0gi7MKN5rrPsEYJO9IcRgpL

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4460	msedge.exe
4460	msedge.exe
4032	identity_helper.exe
4032	identity_helper.exe
2620	msedge.exe
2620	msedge.exe
2620	msedge.exe
2620	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4460 wrote to memory of 1192	4460	msedge.exe	83
PID 4460 wrote to memory of 1192	4460	msedge.exe	83
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 2696	4460	msedge.exe	85
PID 4460 wrote to memory of 4088	4460	msedge.exe	86
PID 4460 wrote to memory of 4088	4460	msedge.exe	86
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87
PID 4460 wrote to memory of 2184	4460	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2cd940b12e43251fa10e18cbdec02578_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcc0e546f8,0x7ffcc0e54708,0x7ffcc0e54718
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4144 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,3781313355306300178,16761522247419242405,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6080 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2620

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4220

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3608

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0a9dc42e4013fc47438e96d24beb8eff

SHA1
806ab26d7eae031a58484188a7eb1adab06457fc

SHA256
58d66151799526b3fa372552cd99b385415d9e9a119302b99aadc34dd51dd151

SHA512
868d6b421ae2501a519595d0c34ddef25b2a98b082c5203da8349035f1f6764ddf183197f1054e7e86a752c71eccbc0649e515b63c55bc18cf5f0592397e258f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
61cef8e38cd95bf003f5fdd1dc37dae1

SHA1
11f2f79ecb349344c143eea9a0fed41891a3467f

SHA256
ae671613623b4477fbd5daf1fd2d148ae2a09ddcc3804b2b6d4ffcb60b317e3e

SHA512
6fb9b333fe0e8fde19fdd0bd01a1990a4e60a87c0a02bc8297da1206e42f8690d06b030308e58c862e9e77714a585eed7cc1627590d99a10aeb77fc0dd3d864d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
213KB

MD5
f942900ff0a10f251d338c612c456948

SHA1
4a283d3c8f3dc491e43c430d97c3489ee7a3d320

SHA256
38b76a54655aff71271a9ad376ac17f20187abd581bf5aced69ccde0fe6e2fd6

SHA512
9b393ce73598ed1997d28ceeddb23491a4d986c337984878ebb0ae06019e30ea77448d375d3d6563c774856d6bc98ee3ca0e0ba88ea5769a451a5e814f6ddb41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
dd9f479c28df0b2d4ed50d4381ab02b3

SHA1
897625c3eb2570b6ceec1b2ad4f6b012c780c82a

SHA256
b42aba627e9ac3c9baa101025262654a7055d3660839343019a614f1afb1fcee

SHA512
5f62dbfe1fb77d976738fa15177ee10480db6bb1d3175f35f15162424acee36639b9e4739c2dc8a86baf225c095d34dd025b0e4c62b49793fa8d1da27af920d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
639bbb791775fcb8b4c1e6bd7fb76d46

SHA1
b7b7eb3f722ff3fa25ab3ce6f5e32eea18cb957b

SHA256
a8e63edb601b87fd31fdffb31d325ef3f191a3608aa180dcb260240b617af521

SHA512
0f52ead2ceaa5d9d05b295ae4527f88d84d5ae20ca4c002827273051e92b030b6a292c181e859dafe3afcf850f22ac77bc124c308339d3cc0fcda6547c2c115c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b0dec533349c4589a8a669b47f0ea4fe

SHA1
f3975b606bb57d11bb7c23c2e22c1e9871de6f20

SHA256
f7ea4d7e7b07c17f3d3c69b5dd45fdd49f7a4938befc2b32b9d35bb532e5e766

SHA512
bd80b379b4b6dcbfa196b85e35ade7cd43debcbf61174565cb7608f35b897b6706f8903db8e2ddaa99f3cf36d4dfc3eae287a489cc4f405144cec9198ca618ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4c78c951602c9e844bc285e3762b79ff

SHA1
a0a5af28c5f95f6c25f8f89cb722ffa4447e746e

SHA256
3eef76632f773145ea5cde8c39dc7243a33201c4d4f26ea1fb810bab32c04faa

SHA512
45f3571dd543dbbd2e58793bd920c04a9fcd5cf83a50d862461f0649d68bdb67e6b297a479c19376d7ea22fb0b8a2673fc959cb74f38a9145adf222a2d5ee28e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
ddedce5dbae0c1ef70e3c480bd36dda5

SHA1
633042e995bfd9bc07f935255cc5c0dde5ffd064

SHA256
4e95270ce851de1310dbe5a62daf7c1680147f4797509046cfece6db07cfb596

SHA512
a7d27b01dac7118d8e78f3bf7d756b0bc459d0e25b600cab340a0fd0a57f3823f9c1cbe479faff7d1e05227f261d777e8f5726730f92aba8353bc6dbf1bd8d96

Download Submit