dd8c2eb399400e800bb5ea25f855b55b3b1c97cbc69daaf2e7fe87f9a81d2591

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
15/10/2024, 05:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

45f7de84be521e570e8ae3ae3093c519_JaffaCakes118.html
Size

32KB
MD5

45f7de84be521e570e8ae3ae3093c519
SHA1

1dbfccef088b0437a033fe5cb08e8fe208586e40
SHA256

dd8c2eb399400e800bb5ea25f855b55b3b1c97cbc69daaf2e7fe87f9a81d2591
SHA512

09a4d90c38237396fb9c1b50d3ce2e9273607029605013a6b99cccfa97e549ef2fd4f9dbfbcb6c0568d28d7f4ad48f068016bf6b566e69caefa6daa0b32a23a2
SSDEEP

768:PLc6tYgOb+T3+kb3LKfyBvXSigFtF1pFEE9uzp7xfFOYIpgWWfK:PfYgOb+T3+kb3LKfyBvXSiQXdEE9kp7m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
1844	msedge.exe
1844	msedge.exe
4736	identity_helper.exe
4736	identity_helper.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1844 wrote to memory of 1400	1844	msedge.exe	84
PID 1844 wrote to memory of 1400	1844	msedge.exe	84
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 4876	1844	msedge.exe	86
PID 1844 wrote to memory of 4876	1844	msedge.exe	86
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\45f7de84be521e570e8ae3ae3093c519_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9105146f8,0x7ff910514708,0x7ff910514718
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2664 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3524 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2380

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4496

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2676

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fab8d8d865e33fe195732aa7dcb91c30

SHA1
2637e832f38acc70af3e511f5eba80fbd7461f2c

SHA256
1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea

SHA512
39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
36988ca14952e1848e81a959880ea217

SHA1
a0482ef725657760502c2d1a5abe0bb37aebaadb

SHA256
d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6

SHA512
d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
448B

MD5
cfab8ec639af15e19aa35a0b5c30bc6f

SHA1
2dfd23736bc91a892b3a1c0d1d8b93617bbd9133

SHA256
ec7490753f5875e34bf116f3d481f5970f43cfca4a996032c5ccdca9d9a2ed67

SHA512
b0904f3bd071fb47bfc39b825b80176c0e099c6f2c69aeed72504575a72b3d5a7e21e2cd7e2f8f706124dfbf9db96484f9c4a38f9880dcd8c3038ee87330031f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5ba3b25075e5e8a67f143525861eea21

SHA1
be6b2661f2b3f7988cb9373a197e5721ee72b379

SHA256
a6840b0b9294420db6278a9cf16ea8fc406ffeaa2798f85aba12e1c131f07ce6

SHA512
3fe8187023099e9ff84994ce8d4a678c5042774a6fdf151ff57e0f8e2c14fad16c6bddde845b16312583723ebe49092360fafd37a72b912a1188dbce624913ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
bdc92d9164665748ba23553e628d58f8

SHA1
e628d042e7b30103e739eee05f838eadde5c9378

SHA256
da9fbc2cc9758d5c9fb12064c5fd2a578742a3a359c9e527b52c4761d5b487fd

SHA512
e00fd8bb9128f0dd0d3d01d6888d05774393be90b9d52b31a76c5a6d337f7fba524b9dc28099cfcd14512bce5d40ac046cbe35a18a7514ddad3fdf09714ae787

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
661a1abdd8b3802adba2c0c0da0fba63

SHA1
40c664ede23ef4972c60a357826777ec519ddf18

SHA256
48f031ebd06818ada81fe1f89ae49b796766afa997b8f6bd2210d1e7f1b5dbfc

SHA512
9f914dbc922aced8a06a35f223419c5c010453c7407633569dae75a84bfaaba7694ab25fc147868e466875ce7991cab819d2a8ad1f1b342522a09922318a4083

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
372B

MD5
5c53667c5d85b3a7215f6afbc2f5a2c2

SHA1
77d3640df11aec2145d2dbd9ee726ebd6c9c21dc

SHA256
de26c7c27617552afa9574723f87c5dde91c4af739d66be06184ac958fc5d829

SHA512
900c8605428ee206a34553980a8971295be608e774924b623cdaa00fc51dd901a41379e1b86d014dc5e702737fd98b93795d436b782e6edd361a548b1c9fe393

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
372B

MD5
cccb96ed5d38aa89070452bef6986181

SHA1
f15a898874bc065513b43e58406dccc0c998b6fe

SHA256
8dd3aaf88f94d685ce4cf8aefbb224db8daa57aa66635c550662c0eab734c94f

SHA512
350cc4b156bf601eedf5525e702677817900aabb0c44d1c536dbd886ab71addcc017fb89885f1ba277066ba2e3d8703731e62192b99a512435715d83ee08f7f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581008.TMP

Filesize
372B

MD5
07ec7a2418323e44e0d45ce71b68764f

SHA1
4d2406bc844fd00742b7f8c6a59dd058cce45701

SHA256
6df359924f47db341c3bd6372eee210d889c203bcd3ad570c19d923f136d6c5f

SHA512
77346d35ae80141b1bc0f3f59151409eac84dbdf4470e74084cb17cfe269313cbe23ef7bb8cb7e2daa030119fe7bd0e715c1cd1b736dbafee8b45d441873a2dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
c6c8a0621a77ae0756ef613b25894db3

SHA1
064117a50576fdc7eed872df65eedbdface3f058

SHA256
b55ed9fd6f1182bd9b28738da6dba78b29b9b75f5f269d96d23c07f565530cb7

SHA512
3f1a204194dc88b345f9a92abd86239f533c7536013c15319edc3f1a1433cd944f5c30e6847d20e9cfb61ebe46f24054c233cdf69141aeb40d0813eb4e5b69a2

Download Submit