a1cf04168d8707124d3316b75cef672d5dda688bb524e19dd9a72d66af811acb

Analysis

max time kernel
145s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2024 04:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3332ec09b46f811f0a58e43b7d99a434_JaffaCakes118.html
Size

74KB
MD5

3332ec09b46f811f0a58e43b7d99a434
SHA1

23f8a376535260200bff019f68a6f7916c6b445f
SHA256

a1cf04168d8707124d3316b75cef672d5dda688bb524e19dd9a72d66af811acb
SHA512

39c5e00d294c648c6adf56b37fb8e6ccca102d6002afe2bbb36fe89aa598c750648378cf26a1e9923208b5875b8af3977cbcbdb70e424954587b2bb412ae754a
SSDEEP

1536:xW6dP2l+7+f+7+x+W+N+N+CeG+Qxt4+u22o0ia4P9dio27:xW6dOl+7+f+7+x+W+N+N+CeG+l+h2X46

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4828	msedge.exe
4828	msedge.exe
956	msedge.exe
956	msedge.exe
3164	identity_helper.exe
3164	identity_helper.exe
3836	msedge.exe
3836	msedge.exe
3836	msedge.exe
3836	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 956 wrote to memory of 4796	956	msedge.exe	83
PID 956 wrote to memory of 4796	956	msedge.exe	83
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 1740	956	msedge.exe	85
PID 956 wrote to memory of 4828	956	msedge.exe	86
PID 956 wrote to memory of 4828	956	msedge.exe	86
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87
PID 956 wrote to memory of 3936	956	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3332ec09b46f811f0a58e43b7d99a434_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc5fa846f8,0x7ffc5fa84708,0x7ffc5fa84718
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3168 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1940 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1268 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1816 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2972 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2060 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,17004115699411254115,10427064393741077614,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5652 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4328

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3352

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e55832d7cd7e868a2c087c4c73678018

SHA1
ed7a2f6d6437e907218ffba9128802eaf414a0eb

SHA256
a4d7777b980ec53de3a70aca8fb25b77e9b53187e7d2f0fa1a729ee9a35da574

SHA512
897fdebf1a9269a1bf1e3a791f6ee9ab7c24c9d75eeff65ac9599764e1c8585784e1837ba5321d90af0b004af121b2206081a6fb1b1ad571a0051ee33d3f5c5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c2d9eeb3fdd75834f0ac3f9767de8d6f

SHA1
4d16a7e82190f8490a00008bd53d85fb92e379b0

SHA256
1e5efb5f1d78a4cc269cb116307e9d767fc5ad8a18e6cf95c81c61d7b1da5c66

SHA512
d92f995f9e096ecc0a7b8b4aca336aeef0e7b919fe7fe008169f0b87da84d018971ba5728141557d42a0fc562a25191bd85e0d7354c401b09e8b62cdc44b6dcd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
4e6b78ae5e145cfe8e99c6c708d14ef0

SHA1
c4575ae9fea9e6ddc69a49146e6adcc94866f851

SHA256
aa7ad999669a28eab20a911f9061b3143594e39c4958ab042a0c5026a854e8bf

SHA512
7f579daf253a0503baece506546f47fdb906f7486e926452d81afe276818601667c699955a9e85a40c7871f3e117da4e6f2ec867a8bd3c18dfca3bba3b4f5d8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
c36d54323babf43f38720ee815389828

SHA1
3f207b2166b9353523492fad4541bae2eb59fe15

SHA256
e57f901c51c3ba3792499e1d7762cfbcfbd0f5a42040e5eaf2b2721b28a8abe0

SHA512
03bce8e8615e9b1c3771e62b1d13a9fb117aceb965a38607e51b766367de226ab374c721db73a0a4ee5ddc9fca1abc818972e6a2cf7f44089c2151613a4e431d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
7eb7d2f6bd92ef4cc6bbcdcbdcba3a57

SHA1
541272c4b68073e57d7eda23023fef7ffdb18261

SHA256
fa06593d687728fc1b7f84ba6ab28fdddc805ada59ed961201c85e59288eaecf

SHA512
3f89ee744b754cb1ff4fe0f62047b81d9ccc3ec2358939be23d703e13a6b1257d2087fdfe6c1906b9d31bd7790c799371d9449ee0c995f342ac5c4bbe677e86b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
53e0513b9ae7fe91b8dda6a195f1f6a8

SHA1
556fdf5c242297eff1d1304b655803e3fbc1d080

SHA256
1813ddb4d0ee3a53c86966b58ea306ab0b230f5d05b1964bc944c59a948f58eb

SHA512
b018afd80b23d29e4472e771112e13f277666cf13c9a029ed6ec93d22b57df7e95b9d7b9c025e5ea20a10b6f4505516103009ef8cf37d2c41a31d186fdb48642

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
dae3f55f8b5979926147fd00436da915

SHA1
3d1246e9f6a8d894daeaf26b83ec0a587ce1db7f

SHA256
d67e787d8f8ddfa7ee1b718b6513c4471308323349b996cac632fb50f6f907d9

SHA512
7d0fe6784bbed77189e20d8f67ffd98ca9d3764db02ea6e2ac381619d16d27e205a8eec74d03f5c2acef3e4b6aaeab4b16f4b5d245da7bfb2f11b63ced7b2de1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
2005e0b7b2150e717dceb104de73e057

SHA1
7317bd751000db443423f6f125d7a2c9d52b416b

SHA256
6cbd3e2070db921f38b81f9fd6a1d89231fea17f701c927d78e8b1ee1b3865ed

SHA512
651b953aa3a0e4a6db500219be610f4fe015d2eafccdee2fe41f12b9bbf0ee0c07390352a44939f0a29bd5a996ecd5e6223c0cdb7b16f9e582ea7fee8af15dd1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
db7c1578c26d5f3390f617dddefe60d3

SHA1
f9ced38306da5fba5ec73c822015ebe8bb1d34b9

SHA256
f8e383db74ee96c49f9c3e625906cd544ab4e894f0015092e2616c864fe72926

SHA512
91992b656957984feed3a5540115ed1774adc91f458bdf85c4eba96f8a76e720351a78484595f05685518701564b153d20f656457af68cb67376890eb8bfaf0f

Download Submit