3e95e76cc0557e44d53678019211f3cf7514ea1e63c4a2db5ec3f338a99452d9

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
21/05/2024, 08:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

629f68b0dfe062b5381f0eb52d2eeb93_JaffaCakes118.html
Size

11KB
MD5

629f68b0dfe062b5381f0eb52d2eeb93
SHA1

c907c4e14848fddf0dad2625446517c70149fa10
SHA256

3e95e76cc0557e44d53678019211f3cf7514ea1e63c4a2db5ec3f338a99452d9
SHA512

ffb254a74f6f28ce15da58da2666a7916c76484f55908ea164ba2e15ad13eaab0047b7f54be353f89b096866e90dd1c55f329ac1ddb63ab436cffe509199ab9f
SSDEEP

192:BvkLk2Drvm/JpLiX1ciOZkt9rU7wPQCWz5z5iZnkrpH1P0sDaGu69QJVkXCGbMsB:Re+xpLiX1AZkjosPQtdItk9VPu50QPIZ

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2164	msedge.exe
2164	msedge.exe
624	msedge.exe
624	msedge.exe
1840	identity_helper.exe
1840	identity_helper.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 624 wrote to memory of 2716	624	msedge.exe	84
PID 624 wrote to memory of 2716	624	msedge.exe	84
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2780	624	msedge.exe	85
PID 624 wrote to memory of 2164	624	msedge.exe	86
PID 624 wrote to memory of 2164	624	msedge.exe	86
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87
PID 624 wrote to memory of 884	624	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\629f68b0dfe062b5381f0eb52d2eeb93_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffffc5d46f8,0x7ffffc5d4708,0x7ffffc5d4718
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7152 /prefetch:8
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6164 /prefetch:1
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6172 /prefetch:1
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:5256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2236,6173965745402934109,14133970058642841711,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2680 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4424

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3576

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3720

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2daa93382bba07cbc40af372d30ec576

SHA1
c5e709dc3e2e4df2ff841fbde3e30170e7428a94

SHA256
1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30

SHA512
65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecdc2754d7d2ae862272153aa9b9ca6e

SHA1
c19bed1c6e1c998b9fa93298639ad7961339147d

SHA256
a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7

SHA512
cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
78bcf69377592e1a4d8ba4831875025c

SHA1
1f551f7d2f2e1b237cf9a0e81bd5e258a0592ad1

SHA256
41012d08241ef42527ed305ba314b8d18560d9245cc252563220731bcb67a275

SHA512
2193bb20082968b4821d3be99e7ac7a9aa07c5f2f860fa66047f6ece0c6ed7ba96e724f108f5bff36f6389ff38373d0701bd95f0b9ffdd6464d50ebd21d7a72b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
e6fca80c6467cedc79ebafd3d0aae91e

SHA1
344069b92456ca9497ca038c8d4114c7c6e5307f

SHA256
6680ae64b684e6c78a3bbed5ac3ef7620c11ba1e087078c604ca5f9ccd0ff506

SHA512
c8955b25fde70f6bcdbfaac62dd9116fed34c2911feac4b40b84ca4ff9e8a3cac2c452ac715ece9e0487bbd560c17459f1f7abb6e6e21a45a05bf96510065a77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1625ea673a8abf057ab79e617561d60b

SHA1
f3c6d2d09d64867dae6bdfb0dd2f983dc297726e

SHA256
d80ed3fbca363758e087279ea148124b543c8d573d76dadafbcd5cd820bf4ed2

SHA512
63ddd1344ad4b9c3499fd68061e6ab50657106b1f878527a9556984729f4e9282467f97b6e783f5e0f9590feb5cc5ac6e370e1b0e970aba061c96924349bbc02

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d7fe885b74260605332e6a45fc53fe11

SHA1
de71e967e1cd9e7ca395e8fb5685a7e533465ab8

SHA256
2229aaf236f64a7ad9b728a43c963e78b441c4e549d0827119e0bacfaef1c8fa

SHA512
11cb2c1954f2526df747ec411e066f1541d0b7879c5f5f20e6c908e480e67d004b952d094cc9c14fb85f85858baf736dfd13d80918166db8370aaad54e54a8f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
f194fb9b69119a829b854fd10324ee39

SHA1
62a9be50f6be2a7c4841cd9add14b4143071c310

SHA256
92462f872c6590e190328125cb89ce51988891b04819d0386de9c161cdce1b52

SHA512
c1616b69d7c4ecf2fbf7f0a4ee5194836e450e1e0c52caf24d878c6a8056436424dbed8278b2af44e9c6bf9cb307d4aca5d89874a9b97abfe80a4bea2cecad29

Download Submit