a2167d076b8503763d62ac95422f34a724691bbb57845e4e42e3470e05f1fe4f

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2024, 01:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

37dbdf4ded8ca9ae3a90fe6cd191cd6a_JaffaCakes118.html
Size

53KB
MD5

37dbdf4ded8ca9ae3a90fe6cd191cd6a
SHA1

9d7c530470bbd2cab8a392a8fd08292880758342
SHA256

a2167d076b8503763d62ac95422f34a724691bbb57845e4e42e3470e05f1fe4f
SHA512

941bfed9fe152fd37f105e72d1bde84f68d69e3fa991e370eaef9e23f3b61b5a514baadbc7248410d04d7958c390ae7b078f5665d20c0a224de8ffdfc40373dc
SSDEEP

1536:gQZBCCOd50IxCqhXVHhFiZQSLw2MJ4N6iZxXU6VwcioktEpqcyu8/rygfNyjaSKe:gk270IxlVHhFiZtLw2MJ4N6iZtU6Vwc7

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3584	msedge.exe
3584	msedge.exe
4592	msedge.exe
4592	msedge.exe
2168	identity_helper.exe
2168	identity_helper.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe
2924	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4592 wrote to memory of 2648	4592	msedge.exe	85
PID 4592 wrote to memory of 2648	4592	msedge.exe	85
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3948	4592	msedge.exe	86
PID 4592 wrote to memory of 3584	4592	msedge.exe	87
PID 4592 wrote to memory of 3584	4592	msedge.exe	87
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88
PID 4592 wrote to memory of 1492	4592	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\37dbdf4ded8ca9ae3a90fe6cd191cd6a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcd70846f8,0x7ffcd7084708,0x7ffcd7084718
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2024 /prefetch:2
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6240 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6612 /prefetch:8
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6612 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3988 /prefetch:1
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2016,9560780820801991263,17233845061713797828,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2924

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:800

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3708

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6960857d16aadfa79d36df8ebbf0e423

SHA1
e1db43bd478274366621a8c6497e270d46c6ed4f

SHA256
f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32

SHA512
6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f426165d1e5f7df1b7a3758c306cd4ae

SHA1
59ef728fbbb5c4197600f61daec48556fec651c1

SHA256
b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841

SHA512
8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
215KB

MD5
1585c4c0ffdb55b2a4fdc0b0f5c317be

SHA1
aac0e0f12332063c75c690458b2cfe5acb800d0a

SHA256
18a1cfc3b339903a71e6a68791cde83fca626a4c1a22be5cb7755c9f2343e2a5

SHA512
7021ed87f0c97edc3a8ff838202fa444841eafcbfa4e00e722b723393a1ac679279aa744e8edde237a05be6060527a0c7e64a36148bd2d1316d5589d78d08e23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
c1a5833981804b25422d21a85f8abf0c

SHA1
4ac3596281930a6e29566d19886fda56ec13bfce

SHA256
301d450325f9d7e4632e45425ef250d77b91aaf2248921070917a1a4a0234ca2

SHA512
c5f479ac4a3fc10b493a91e7c8dbbd808cc347fa0972cebc95e5f3d0f217482eafffd9dae455dca8685799b55aa76b095cc5aaa5764ebbc245543d80e7c83426

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
984890de9506a362a4ec468521d931f8

SHA1
556e012a4e98f9cb84c090ad6c159d837b545c93

SHA256
0f7ffef256abf512c88da55c6ac94c6e5807f4c453c0959d44db39e07859e0ac

SHA512
93b3564eea6a080c54597a4f607f819bb21720ca5e5fb0c87d4e045a4afc217c9451c53b1dc3fea08dd61d249d4db69f35dc86433cc5fd2ac5a4ade6f3ad4779

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
590a187dbc2708592852e8d62dc23d55

SHA1
8c02cf24874a8ebe0c9942a9425c8943b074cfb5

SHA256
ea0c9d21c3749dd571ee8be054a69604d624a68a58b8ee73ed31026d9ceca31d

SHA512
7b0c97d7eaec7901fc8a88bd45234b38abf7b2dbab6985c281f36557f8a851f52697b46d14ad74b6e2fc9bad4b5571fba93633d6fac716bdededab1499265f57

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9b82efdab0af42c303959bdabd878e11

SHA1
3edb2c6bd745600aa18556e4c25b4d69aaf86656

SHA256
af42527a2f6c5ff8e84c8f0e8e7df2280416342c60c8fdf5223e9c7341fbee82

SHA512
c960a47c12989646ccdd619adefbdc7cbbafba46d938d74fb58074697b0ac0751d157e77a05b0e2626994b67ca5b3f683e1f41160d72647075dc19352c502efd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
d6d5e6034064fe64050613456619b66a

SHA1
4d4fba1bf6f67186c57e5082ad4e35953c44c22b

SHA256
5a6333ae4ebbd94f0ee594bacc8d669b7f61aa3190aa41005e8092def71884d0

SHA512
bebae7124d9ac61003553f94b78418cd7d5a4c231d1a8c30f83f82b16d59d1a599c9f91850b6faa8ccd9b2a7b4455063bb8a1a680859af4831434db559746b58

Download Submit