bc614134ad492d121bf5a6410b53c8fa617c81835f600a441c8c5a2e41ad3ecd

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/10/2024, 05:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3df7ece8f5ce53417ed024503950752f_JaffaCakes118.html
Size

58KB
MD5

3df7ece8f5ce53417ed024503950752f
SHA1

ceeef772cd4feebbd68e2045eeef5fc74a50e897
SHA256

bc614134ad492d121bf5a6410b53c8fa617c81835f600a441c8c5a2e41ad3ecd
SHA512

ce6dc924e5456edac97475178642a7bed560897314bb3b2cc351f266c007b8106ee14812dc5a301e1f25e7788631567805111095f47aaf45e23deb6ee25a930f
SSDEEP

1536:gQZBCCOd50IxC03aU7fefbfSf7fLfbfnfOfufvf/flfZfff4fSf5fGfBfSf4fMfZ:gk2v0IxgcGDqDzDvWmH39BXQqx+JqA0x

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2248	msedge.exe
2248	msedge.exe
3136	msedge.exe
3136	msedge.exe
4188	identity_helper.exe
4188	identity_helper.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3136 wrote to memory of 888	3136	msedge.exe	83
PID 3136 wrote to memory of 888	3136	msedge.exe	83
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 3224	3136	msedge.exe	84
PID 3136 wrote to memory of 2248	3136	msedge.exe	85
PID 3136 wrote to memory of 2248	3136	msedge.exe	85
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86
PID 3136 wrote to memory of 2320	3136	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3df7ece8f5ce53417ed024503950752f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f3e046f8,0x7ff8f3e04708,0x7ff8f3e04718
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2684 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3904 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,5438288972347705799,14705840423443946623,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1820 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3240

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3948

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1380

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
dc058ebc0f8181946a312f0be99ed79c

SHA1
0c6f376ed8f2d4c275336048c7c9ef9edf18bff0

SHA256
378701e87dcff90aa092702bc299859d6ae8f7e313f773bf594f81df6f40bf6a

SHA512
36e0de64a554762b28045baebf9f71930c59d608f8d05c5faf8906d62eaf83f6d856ef1d1b38110e512fbb1a85d3e2310be11a7f679c6b5b3c62313cc7af52aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a0486d6f8406d852dd805b66ff467692

SHA1
77ba1f63142e86b21c951b808f4bc5d8ed89b571

SHA256
c0745fd195f3a51b27e4d35a626378a62935dccebefb94db404166befd68b2be

SHA512
065a62032eb799fade5fe75f390e7ab3c9442d74cb8b520d846662d144433f39b9186b3ef3db3480cd1d1d655d8f0630855ed5d6e85cf157a40c38a19375ed8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
215KB

MD5
1585c4c0ffdb55b2a4fdc0b0f5c317be

SHA1
aac0e0f12332063c75c690458b2cfe5acb800d0a

SHA256
18a1cfc3b339903a71e6a68791cde83fca626a4c1a22be5cb7755c9f2343e2a5

SHA512
7021ed87f0c97edc3a8ff838202fa444841eafcbfa4e00e722b723393a1ac679279aa744e8edde237a05be6060527a0c7e64a36148bd2d1316d5589d78d08e23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
e9134ec8e7f80de699ab0c872ab63a7f

SHA1
beb1df7d6699ad922ee81a09d956a5c0e48b8569

SHA256
af5031b04be4d0f244c2be4f568c7b19f0d0b7896576bfb9bf0e874bb9d591e4

SHA512
8410016a0af19f14d2516a1c2fa5347352bcc37d6517e5bec579f5ebf8aa97f5344fca3bf6ba27fdec22875d83b1b32cd0ab0a628e8aea1a87cfbcd5c03da594

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
f00e59ee2d701920c6cd7825e101774d

SHA1
c5e055578dc5c87182503a131886f55ed273ea46

SHA256
ec2aebae97c1ef9d56b6255a727c380b903c2bd328fcb47bbed3cab932cefdba

SHA512
30f5cd23c6a2bd31a7d5e264913093811e101fed7344cb3b5082aece88f8b441347b2bee1eda8d208cc10b2e665ba6c685fe27b5b18a99e7a78c7c8a2b39a277

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
424a0550fb06b2e7ee42c220c9b8c86e

SHA1
fe1664629ded6dfec80e30f8121dccc30f361d8b

SHA256
eeafe93ee74abcedce1c864008997611fb87f5074b1bed48f62e2717c1632115

SHA512
f59083ebd73464bd009c73a0b147c305547ee00c8b4b7fa12433bcefe11118bd65aadd7062b0b29675c061ae0fef604847c9d86a38e86957cea04b16ff94e34d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
895576c7fdd6976dba20b8db0b4158a6

SHA1
ddd4cadef4df5db0a0456978f43211e85a5312f8

SHA256
c24b112d937d5a5c0b1b1f38f9e56c9869867480d419bbf7016e6f03ec9368ec

SHA512
869742acc4fc5bfa72797f815942604ab98d12206f1a4a9b31cafe83c5258fb7f6f3beaad0ffad10b254023af85eea7a96d00695443cf81a383f2ceefba97294

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
cd6d780eb05f1e6e13dbd15b707bb564

SHA1
eac325dbbd216a9fd22d9c9f1440f8787a833622

SHA256
c50a64e670a5d99334e02ccaf20ec817eeab8d1eae76e0c323fea9889e08f809

SHA512
5d97f3c85c0c18ac309450f353b5ef94ff2ada11eeb409cb2b3fe6e7fdd39e0d7ffb8338e993839c6acbc00593f5c56d92500bb13b24a4560368cbcb64a92f5f

Download Submit