3d5cf38c4e93ea95cc7cf9368490bdaf34c0bb8d938abcea9c6b1ef42669f7f1

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
07-05-2024 21:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

21e4ebfdd71e0a564fa60419a3ffff15_JaffaCakes118.html
Size

175KB
MD5

21e4ebfdd71e0a564fa60419a3ffff15
SHA1

2d553efbdc0a9dbdd14b4346a67771261df56da3
SHA256

3d5cf38c4e93ea95cc7cf9368490bdaf34c0bb8d938abcea9c6b1ef42669f7f1
SHA512

e1d42160641bdce850295a99b100b149ca607a46011e59e5028c8d8cbe874bdf8983fe35e83805a6c1ae8e5c87883a84be4d2a6af3b8f8a35f6511ab674d2b48
SSDEEP

1536:Sqt58gd8Wu8pI8Cd8hd8dQgbH//WoS3dGNkFeYfBCJiZ0+aeTH+WK/Lf1/hpnVSV:SHCT3d/F3BCJiXB

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2264	msedge.exe
2264	msedge.exe
988	msedge.exe
988	msedge.exe
1568	identity_helper.exe
1568	identity_helper.exe
1436	msedge.exe
1436	msedge.exe
1436	msedge.exe
1436	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 988 wrote to memory of 2652	988	msedge.exe	84
PID 988 wrote to memory of 2652	988	msedge.exe	84
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2640	988	msedge.exe	85
PID 988 wrote to memory of 2264	988	msedge.exe	86
PID 988 wrote to memory of 2264	988	msedge.exe	86
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87
PID 988 wrote to memory of 680	988	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\21e4ebfdd71e0a564fa60419a3ffff15_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc84fb46f8,0x7ffc84fb4708,0x7ffc84fb4718
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2828 /prefetch:8
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4780 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4780 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2020,3960251338036797991,16447587493603458607,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5216 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1436

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1128

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:888

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3880

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4e96ed67859d0bafd47d805a71041f49

SHA1
7806c54ae29a6c8d01dcbc78e5525ddde321b16b

SHA256
bd13ddab4dc4bbf01ed50341953c9638f6d71faf92bc79fbfe93687432c2292d

SHA512
432201c3119779d91d13da55a26d4ff4ce4a9529e00b44ec1738029f92610d4e6e25c05694adf949c3e9c70fbbbbea723f63c29287906729f5e88a046a2edcb7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1cbd0e9a14155b7f5d4f542d09a83153

SHA1
27a442a921921d69743a8e4b76ff0b66016c4b76

SHA256
243d05d6af19bfe3e06b1f7507342ead88f9d87b84e239ad1d144e9e454b548c

SHA512
17e5217d5bf67571afb0e7ef30ac21c11ea6553f89457548d96ee4461011f641a7872a37257239fa5f25702f027afb85d5bd9faf2f2f183992b8879407e56a0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
8bada36857ffc740c50d57959eb104e7

SHA1
04a3e00aed723e72ae3d2a75224d1330b325050f

SHA256
acad5131948eaa844e9a525b7e8adb7a30d1ecaa9c3c5d056ee838b433f3f66f

SHA512
79205f9a22aa1d3e0e24e8c429573c71564dcb130490c1426578d8042d625c63e94a38c4b0f414ee08248110a275fe1e3d49576ac79ed6c0f752755353a10246

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
9d7a58dfa7674a28e0e87ecf61f376f0

SHA1
9583ce34008ff4e0f92adebc25c7cfee4307fb58

SHA256
88f6e557e82ccffbc01c6ba894940054a8670328ba2da37e4ef8cd88b1fae9cf

SHA512
ddda191529793bbbdd3533e0ddb52dd34a8b407814988ef7981158694a3106d8e6236f5760361737020a51d12a9cf7649916452a86c3ed2a298963ad20f031ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f644c360c370451460359e4c58a08b8c

SHA1
a2c8c451f0dfd7813a4949457dd4688dcbd98f5b

SHA256
679c8949651bc0e15b3a7659487c6c304a74b22d8d71cae2a6eb6c135554d380

SHA512
abe0946c85be8192629a2b1462f1f4d1220030947d94e049dfd0a2441e711404092dc4f7208a850db17ee7a63f0685374c742d86b6c2214b15f5b547f29f7683

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
31fced5390261b25ef4711baf192dff2

SHA1
a1491b853fe1ebebe96cd0dfc049f29d73695367

SHA256
ed0bb3955cda2a8fc6b68a19ae9670d477d8c2f091ac7d53e848d7aa89f83468

SHA512
ae96fd1096b61758e035938fbc3dbb426ec3cfc96d6e1a6cb1b14141457966d0671c5d9d629e629217b9463d1e61d8b1c6d78a35234857504beaf1e6276dabbf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d32c599a-7d10-41a3-8f0f-8799c79dc016.tmp

Filesize
2KB

MD5
fcf5a191e5905a786f1eb369d91745e9

SHA1
c1b7914102df33c88d3da34f307752124567c89a

SHA256
4f7a7d8128be4165e3b176f1c8a8b1605a92f30fa671b4511528f50b4bb5f361

SHA512
8c7f48cce82bd34733b25c89c3be5eec6cc1f529a50fe0c224858b5e145ff1481a1bf39bfddc0fc3c3c6bc64a1cefca64c34e27fd4bc71bc78b6f8280e01d79b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
267c715a8e0fc202fd1eea1533912619

SHA1
fda7ad2f09b42129a87b6a1cf214fa6a7f800161

SHA256
e2d534d7d8d667d3ad6446a0e00f4c3ece27d172f9327e18511a434fd3d7a88f

SHA512
52513a2f7eba08069424c734b3a4f7d328029b013d742da52ae17123e01bf7b5de649394260b52064c632169b1edb32dd16a2863e1612fb420d2f100939822a8

Download Submit