6b381809596ce14ec6cf493dbcc1d2e920c095dddc919a119172baa9f23e661a

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
10/10/2024, 12:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2ff59e0f809a90e50224611842d7ba8d_JaffaCakes118.html
Size

57KB
MD5

2ff59e0f809a90e50224611842d7ba8d
SHA1

390de54bf28aa7c8faa7ef9f2f9022bf70c29970
SHA256

6b381809596ce14ec6cf493dbcc1d2e920c095dddc919a119172baa9f23e661a
SHA512

bb4ed9a54614e1c4d187117d7bace5b98de99355a182c4714a332c53918d428c770720c05126e278a67adc37a265931aa71f9dd5b16c261ebcfae85256b0ea3b
SSDEEP

1536:gQZBCCOdF0IxCrFABfYfGfCf0fofWfffufefsfAfQf2fgf+fTfqfAfBfiflf/fzI:gk2z0IxVAOqMgOHG2U4IuomriIpKt3LI

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4252	msedge.exe
4252	msedge.exe
536	identity_helper.exe
536	identity_helper.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4252 wrote to memory of 1092	4252	msedge.exe	83
PID 4252 wrote to memory of 1092	4252	msedge.exe	83
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 1324	4252	msedge.exe	85
PID 4252 wrote to memory of 4308	4252	msedge.exe	86
PID 4252 wrote to memory of 4308	4252	msedge.exe	86
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87
PID 4252 wrote to memory of 2748	4252	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2ff59e0f809a90e50224611842d7ba8d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcf65846f8,0x7ffcf6584708,0x7ffcf6584718
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2020 /prefetch:2
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4904 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2000,1363823052654382692,5082127061021916571,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2404

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2548

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2568

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56a4f78e21616a6e19da57228569489b

SHA1
21bfabbfc294d5f2aa1da825c5590d760483bc76

SHA256
d036661e765ee8fd18978a2b5501e8df6b220e4bca531d9860407555294c96fb

SHA512
c2c3cd1152bb486028fe75ab3ce0d0bc9d64c4ca7eb8860ddd934b2f6e0140d2c913af4fa082b88e92a6a6d20fd483a1cb9813209f371a0f56374bc97d7f863b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e443ee4336fcf13c698b8ab5f3c173d0

SHA1
9bf70b16f03820cbe3158e1f1396b07b8ac9d75a

SHA256
79e277da2074f9467e0518f0f26ca2ba74914bee82553f935a0ccf64a0119e8b

SHA512
cbf6f6aa0ea69b47f51592296da2b7be1180e7b483c61b4d17ba9ee1a2d3345cbe0987b96f4e25de1438b553db358f330aad8a26e8522601f055c3d5a8313cdd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
213KB

MD5
f942900ff0a10f251d338c612c456948

SHA1
4a283d3c8f3dc491e43c430d97c3489ee7a3d320

SHA256
38b76a54655aff71271a9ad376ac17f20187abd581bf5aced69ccde0fe6e2fd6

SHA512
9b393ce73598ed1997d28ceeddb23491a4d986c337984878ebb0ae06019e30ea77448d375d3d6563c774856d6bc98ee3ca0e0ba88ea5769a451a5e814f6ddb41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
b4921107a9a7adb2a6492130e1b52364

SHA1
789353ef45a3e768d8084441523683300e1b2c31

SHA256
5dd9a687b41efa4c45a5455a223d85068d8ed2f823b8b8a39d0489951b4e6d25

SHA512
2e78b4ab27dee3d7bc062e658e649f4ae3cd78f0d43bf32d09c689687549aecab738f2d0022c7bc720dcf190b96ddaa092c275c6ea3f4f6bebc256f0f1b8f633

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
203feafb3b81033f69c81795ff89c975

SHA1
46439d6d1c45d3bcb198d1d66fb64f36226e6c8f

SHA256
92aee3c179b6332490b6ea2ee75ac7bdea3bf7da47aaffec112ae8d77f1bff11

SHA512
4ea948817bb0a7821f94c9c8b17e52c046706fbac7a62de658fac964504e7f73f32c319df30dad087a93f6eff766db10d1a8ed5e5791625c89bb0a2203b1e87b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
440e912d06dedef9317b5a42e5de9036

SHA1
e365f3423b761c201260e01306b556d6cdf315c8

SHA256
4828b1809820da4dd382964a1b72995d45172cfce2d6d09a4e2b8a66a8476c18

SHA512
ab6c6711e937d3cce7b8ccc7808b1359743b8e84ac4547efd3964e429a2ec0100df56c41320c066b103e0b62cc74df99b611044835ad5fdb58632717451bac4d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6d4a1cbfce43c5b81c68d3abcf73da46

SHA1
d52e9b3e4b72f12644a46d72f8a0c9e55cbe23df

SHA256
82c4ec6a6701f2f31ea6980256a22504046e9b8f81a90700d243d09e78d32105

SHA512
e42f86e9764bb2d3a743d63b1bea041d5fa1d0be1f3f01d7c2ca2abd1ca596fabd2485b96407cb009b0e9d224c7bbf4a45d1da86584e279ece0f12017621831a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
231163f18f86fb72614335d650952ab4

SHA1
8dff7e00d9302fe8b0880f0f9c437a670d2434d2

SHA256
6aa42c3efd24efbeaba4983a11fa04ffda7411bd34da105b8bdea5946c95c8d2

SHA512
6014c4abb01f2629de7d557df7f19ab29c1f6e73ee0658158b7027ab76edbc2e903026081ed6f87258c3aae6f5404862a066bd539506fffadd5d7a9a4e6a1b6a

Download Submit