49ba28e52784378aa9e44fe2191015831036202856500045300dda3b9d948e58

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
21-07-2024 19:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

612abfbb7552caa57026c118b1b7329a_JaffaCakes118.html
Size

97KB
MD5

612abfbb7552caa57026c118b1b7329a
SHA1

7a7137bd1f2a67d422d5bc735ba6218fab09aa75
SHA256

49ba28e52784378aa9e44fe2191015831036202856500045300dda3b9d948e58
SHA512

8189a0c31628522a9de1f6df3bfa80c2555662b71879644c8aa2324199cbec600728a19c8e78fa0144f9ec2cffeead44452d8ce19673a730af1c7c4576320b8e
SSDEEP

1536:wQBHv7ynvVsetIADhKlIT+JtS68KIAFQVA:/BHTGVJtIADAlkIr8KIAFQVA

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2732	msedge.exe
2732	msedge.exe
4388	msedge.exe
4388	msedge.exe
5060	identity_helper.exe
5060	identity_helper.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4388 wrote to memory of 2244	4388	msedge.exe	84
PID 4388 wrote to memory of 2244	4388	msedge.exe	84
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 4432	4388	msedge.exe	85
PID 4388 wrote to memory of 2732	4388	msedge.exe	86
PID 4388 wrote to memory of 2732	4388	msedge.exe	86
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87
PID 4388 wrote to memory of 4592	4388	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\612abfbb7552caa57026c118b1b7329a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdea6446f8,0x7ffdea644708,0x7ffdea644718
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2756 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,12545025657139909894,472513276264875303,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5260 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1312

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1344

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1680

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
04b60a51907d399f3685e03094b603cb

SHA1
228d18888782f4e66ca207c1a073560e0a4cc6e7

SHA256
87a9d9f1bd99313295b2ce703580b9d37c3a68b9b33026fdda4c2530f562e6a3

SHA512
2a8e3da94eaf0a6c4a2f29da6fec2796ba6a13cad6425bb650349a60eb3204643fc2fd1ab425f0251610cb9cce65e7dba459388b4e00c12ba3434a1798855c91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9622e603d436ca747f3a4407a6ca952e

SHA1
297d9aed5337a8a7290ea436b61458c372b1d497

SHA256
ace0e47e358fba0831b508cd23949a503ae0e6a5c857859e720d1b6479ff2261

SHA512
f774c5c44f0fcdfb45847626f6808076dccabfbcb8a37d00329ec792e2901dc59636ef15c95d84d0080272571542d43b473ce11c2209ac251bee13bd611b200a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
bce2e9853b10637e59261def897d6a75

SHA1
608fc91bd664a3ecfb4d81c1286697feeaa8130a

SHA256
3471a1c214e8bbae2dfd2b2773951a05a1f43ac4e0f30d98ec8a24651fa0d31b

SHA512
ece482b4d4f8b339cf3522a5c312e0441c875fedfc9e40f2a5c4124500b9959d7775cdd33947d20f59d3083d0b3802fe96f5605515c92f124410ba2882b3402d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
cbdf7e00a028e2dcf3a1d7ca6b15c9a1

SHA1
883c7a0426eb2d80c54218595dda182042136ad9

SHA256
4df624870b72b916a96d5c77d3945ea861669bc2319d7350e24a761698ecce46

SHA512
61d17c08643e0d6f249878068f26ca9d69d45f949ecc8c94cdc56e622413702087f4503917d4d1ee57526f228ba0438e8edc08bd17cb549b4d9f499124db023c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1db97a99fc9541cf6aeededb12e2166f

SHA1
886bad02f04bc290b92f8ef74fbe25d2c321a071

SHA256
091b55f2704a1d9ec3c37f042dc5f6e93ead5e330690cbed58d989ad564911e2

SHA512
9ba0a71e9f7ebbf7cf0fb6aa03b625368b87e9de9ec34f400543fd8cd54079d640b180f55c64b0228b7c438012eb84f002bf1a90b480fbde1c07d83c39f908b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
664b1c242ca6d8cfbae23e59cc63fe44

SHA1
de225c25385e626ede58a831b734198355a70ef7

SHA256
6eec8521e989654429d6385f99f94dd855dc5270735a4e0b38fe2a6f767f7c1c

SHA512
7b070bbde534581079fe0fb8c3588aa72e909715b9ed9e84071107fddcc2a843cca135fdd23d9678b1cba4a9323d66f83c59777cd309188e432c6442ec537ec9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
65a169cfe9417f88d470b30fdf2f709b

SHA1
aab7ae2bc1191a61968431351e5ac57250462179

SHA256
d01bf9bc023aac2110fa4496da31cc83b3ea8fd560c9972d0ab5b673fd915ba2

SHA512
f204d5d43b7eaae18e8e29ef2564b410f69731bcff2111598351f634b744621c2729f73d435d59e69a136a44f1b0053fa70cf1640ea117c239f697a1883251e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
59dc72822b3780938c56e9491b879972

SHA1
de379356aedf52639907b84ee184fd62cbbf0a63

SHA256
d1a11c5a5d05e10eb459794c3d0ec7566e268af4e45d241129233628a68504ee

SHA512
1fca3a33599bf667a0ab610f9f283df488f785380297a51c70d17f27bad28506c0cd1df6b9a32fb0162e3de04738c4a735a3841d164cf75be959aaede2979b7a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
91bb12b86360c45a8f912351c127a9a0

SHA1
a624fa99136a4d21b8736f64d4ed9813ddbea7c7

SHA256
e99948bead067323e3d3d2a26fe7b442ef8f320e8538edc4bb914cbfe918e36c

SHA512
e5b567d5890d8482bd2593c736f44e7995ea50eff08a32683b4544c02eccbf6060f2de9d71912719cbb11024551f095bccb512dba1df93262410ce4aa3cdefea

Download Submit