1a3a97670163c4ba48321f7d2d3ad61feb2ba2c06e5eb65ba53ef12835431b9c

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2024, 13:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3a4e0fb1ef24b3950f4ca5f6b8cb30ac_JaffaCakes118.html
Size

55KB
MD5

3a4e0fb1ef24b3950f4ca5f6b8cb30ac
SHA1

ea382eec6e4fbcaae987786c7c3ada5add7ac178
SHA256

1a3a97670163c4ba48321f7d2d3ad61feb2ba2c06e5eb65ba53ef12835431b9c
SHA512

d9882a09bcb2b874bdaf663d7bdc3539082cd5067a35847c12969c02789d67099fe1d3ab9a4eb13dbb407bca4cc02a9fd0f919ce07570dc9a556aa5e68709cef
SSDEEP

768:oswWJFBBhB1ywSclfodB5+RW7UUCCCT7OCCoHCFWQCZRC5siA:oFWLBBZywHun/nMx2y3

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3616	msedge.exe
3616	msedge.exe
4296	msedge.exe
4296	msedge.exe
2104	identity_helper.exe
2104	identity_helper.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4296 wrote to memory of 1680	4296	msedge.exe	83
PID 4296 wrote to memory of 1680	4296	msedge.exe	83
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3640	4296	msedge.exe	84
PID 4296 wrote to memory of 3616	4296	msedge.exe	85
PID 4296 wrote to memory of 3616	4296	msedge.exe	85
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86
PID 4296 wrote to memory of 4900	4296	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3a4e0fb1ef24b3950f4ca5f6b8cb30ac_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcd55e46f8,0x7ffcd55e4708,0x7ffcd55e4718
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,12985119504928831062,6062809072457553720,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2168 /prefetch:2
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2160,12985119504928831062,6062809072457553720,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1480 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2160,12985119504928831062,6062809072457553720,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2736 /prefetch:8
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,12985119504928831062,6062809072457553720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,12985119504928831062,6062809072457553720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,12985119504928831062,6062809072457553720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4632 /prefetch:1
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,12985119504928831062,6062809072457553720,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,12985119504928831062,6062809072457553720,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,12985119504928831062,6062809072457553720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,12985119504928831062,6062809072457553720,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,12985119504928831062,6062809072457553720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,12985119504928831062,6062809072457553720,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4632 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,12985119504928831062,6062809072457553720,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4276

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:432

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:212

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fab8d8d865e33fe195732aa7dcb91c30

SHA1
2637e832f38acc70af3e511f5eba80fbd7461f2c

SHA256
1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea

SHA512
39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
36988ca14952e1848e81a959880ea217

SHA1
a0482ef725657760502c2d1a5abe0bb37aebaadb

SHA256
d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6

SHA512
d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
758B

MD5
ea70c6c096ebcfc1f64a0daf98cec8ba

SHA1
b74e099e7e8140c7311e0a4e59bd46e161eddf31

SHA256
d6971643cec752b03d81b4dc0508befa2ead147b0f16d5780f16d26dbc311e74

SHA512
d94421292cf52a4084ced4da695f90ba45a8c7fabf6b5241a3c81a7e14f45fa0c1b62b862143378dec4ffad24ae8408d47e77c1097945450abf62779bcd358ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3133bb427ce59a2ceadbe7d3fb003e32

SHA1
ce72994d41cb39cd7cb358bfb8f95fc91c42b691

SHA256
1feef8684b39a39901811277077c09ce52ccbbb977aae0369f733fd3bb106b20

SHA512
24cbd735a9f28591808e917c9c7dd714e7b0eaea20cf6fed0af78fe4a000683d01263e91c2a360435c3c6c787e5a71b6b611f1d3d2ade3ae46fa7111d65db711

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
495a600f819cc9720b1c095d97706115

SHA1
adbc44b1a7814bf8addef580906b0d1f604d92b4

SHA256
e911fb9e30cfc56a3ba7615b34bd58f1b30d5e587f4babc8e079cc5fe1884648

SHA512
523e369d2986921abc52a0903fd088f2f13fc8f470cd927b0a3be8aea472775c7668cc78491c305919131e91a1bd3b301383e80b1681153cb7a3daeb85b44446

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
367B

MD5
a4c78d4df3834c44cc27e73befdf991d

SHA1
949d3bbdadf293bb6f04bc1de33728912ceab7d7

SHA256
732f6ec1ba35a594e918a902b1278e9c2e54bffbe0fe531aa7b7de6573e5e345

SHA512
08149b701648ad4659c7128d2de55e191fda4d131b28f2eb04a5cae844625945b8c8cb42c4478548cfa1344c95fb140897618073069f4fb254ee9792b3f2ccfc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
369B

MD5
b34f6e46d950f57b6222d884a967e8c4

SHA1
ae7e804fe55435c83b8bc6e0b9af0eae3e740ceb

SHA256
db7907390677c7b0ea7ac921d2353f2288a86924e8ba88fd45f5718f229e4fbc

SHA512
c2f33cca4c52e27b9bb4771f6c05f859c18b15f9bb7a01d7a97e836dc37544df36112dcb09d11cff5be8052b740be5379d28f592d57f0c36fbcdb3417791ba23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe584fc1.TMP

Filesize
367B

MD5
c58bf1f4f6ea7d0fd357c94cda4bd5db

SHA1
f32504948b859d25f8f019c0f9d5b8dbc8cd2b3c

SHA256
b7adccb01a215a9b30ce79bc53750b7e03b95580bf845be4e626e4561e47d664

SHA512
f5b3847e8dcf6d478daa16033e2b9d1cd6889aae6f691fd1de7fc4c116e04843fee088b6d689a70615be08fa86398008ddc41a6830fc35d912b7721107455d88

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
c4ae8690b5ba6b5878565590478feb55

SHA1
5bb35892ef4416f20801c182cd3c3abf41f97a9d

SHA256
c3833eef288412394883bff71e3b5cda6c7d36e73107c01d7b660a240442563b

SHA512
b9f9ace38a09692f582c85c145904fb366bbbc38c9f98b5479cf0c7866187939a5ee81469918fbb368d90bc24b959cc02f4f1afecb8b191aecee7f4ebc448339

Download Submit