7ded34348430638bfd4d5cf5dd4f9cc9d6fb5baa91fe92ec64b17570baf4ae96

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
06/01/2025, 01:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_065b617bbc1cbf94c9d9103010b2664e.html
Size

28KB
MD5

065b617bbc1cbf94c9d9103010b2664e
SHA1

c4c14f2d57824d1530f3b0eebf94b188aa6a9744
SHA256

7ded34348430638bfd4d5cf5dd4f9cc9d6fb5baa91fe92ec64b17570baf4ae96
SHA512

efdc54512fb2fb831b8d51b9041177c4b894265ad6fcbda21cc21f40eb71c36e60113a7eaf561a75149c3706137512909b0b8d0984f5aa02a0494bf2b1b70568
SSDEEP

768:PtZRsV2+63kPENbjJZYDN4n+Gy1JlwswWuR:1ZRsV2+63k8FjJyN4nB

Score

5^/10

paypal discovery phishing

Malware Config

Signatures

Detected potential entity reuse from brand PAYPAL.
phishing paypal
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2860	msedge.exe
2860	msedge.exe
2544	msedge.exe
2544	msedge.exe
3676	identity_helper.exe
3676	identity_helper.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2544 wrote to memory of 4716	2544	msedge.exe	83
PID 2544 wrote to memory of 4716	2544	msedge.exe	83
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 5068	2544	msedge.exe	84
PID 2544 wrote to memory of 2860	2544	msedge.exe	85
PID 2544 wrote to memory of 2860	2544	msedge.exe	85
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86
PID 2544 wrote to memory of 4748	2544	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_065b617bbc1cbf94c9d9103010b2664e.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9f2dd46f8,0x7ff9f2dd4708,0x7ff9f2dd4718
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1924,15013780665630391668,1972447452802536968,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1924,15013780665630391668,1972447452802536968,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1924,15013780665630391668,1972447452802536968,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2840 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,15013780665630391668,1972447452802536968,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,15013780665630391668,1972447452802536968,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,15013780665630391668,1972447452802536968,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,15013780665630391668,1972447452802536968,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1924,15013780665630391668,1972447452802536968,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1924,15013780665630391668,1972447452802536968,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,15013780665630391668,1972447452802536968,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,15013780665630391668,1972447452802536968,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1924,15013780665630391668,1972447452802536968,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4752 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2484

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1212

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1656

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7cb450b1315c63b1d5d89d98ba22da5

SHA1
694005cd9e1a4c54e0b83d0598a8a0c089df1556

SHA256
38355fd694faf1223518e40bac1996bdceaf44191214b0a23c4334d5fb07d031

SHA512
df04d4f4b77bae447a940b28aeac345b21b299d8d26e28ecbb3c1c9e9a0e07c551e412d545c7dbb147a92c12bad7ae49ac35af021c34b88e2c6c5f7a0b65f6a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
37f660dd4b6ddf23bc37f5c823d1c33a

SHA1
1c35538aa307a3e09d15519df6ace99674ae428b

SHA256
4e2510a1d5a50a94fe4ce0f74932ab780758a8cbdc6d176a9ce8ab92309f26f8

SHA512
807b8b8dc9109b6f78fc63655450bf12b9a006ff63e8f29ade8899d45fdf4a6c068c5c46a3efbc4232b9e1e35d6494f00ded5cdb3e235c8a25023bfbd823992d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
897B

MD5
af03bc4ef619c66b150fc9294c2f8a16

SHA1
46fbf3c66f7e674518b8561a9be077f72b7c7cf4

SHA256
54c659a1ae7e9fc73dfbf7cde1c03a71c595d60ee33bbb30081a98cdff61040d

SHA512
e184c51d545c9e99cee2b80075fe0ca9bf13e878dcefd3a06dc31c651551cb52a3abe50b4cd2225a3a30c12d191c34fb93f7ad005e0bdfa81ff62b4579762b71

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
866B

MD5
e994c4e7706d7c86cbc29acc469054a5

SHA1
2d44c712ba5747d0c5cd2ee3e123c6da25d3aab5

SHA256
02d5761f2d08f0d079a40bccb83f20e655e23def61ed4ef835b01652cc3e6554

SHA512
030454bc9b91d5bfade7ab2826a3242178f83856f4c5b600aca496441aabb948af6e2b704bdc35b70375cefbce1ff8f8d21a937a46903906b7663109e4ac2f2f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
e3e6cc321b77b773ea8ddb792e6b1184

SHA1
651c5182b73b58b9c45a9b2616b076d97ab8fda9

SHA256
a4be64aa565c788fcc4c3acc187d33a4734e38a07a83bcdaa057e72961fced5f

SHA512
cf01f71680ef31123e57dedec18d8525c3bfeadce922f90c964daa69032686c6c9dcb455b53987974c19986416b69714f30f6a74d117ca4483c6f100f7461781

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
26d9ef9e3b36c6835fd39e473098a1be

SHA1
68a852606d48c33ba8c5e712ec90e25061241017

SHA256
ec98c101f73344b658a6f4028d4734483b9411c121bbef540a35aa521ce53a48

SHA512
e9612336f00fbbb62670ed92864dbe7eeb2d7744e08872932eb0f05bbe1e3b6ca78749a34227e137adccf2549ecf19fb9ef85c45f65726ddcb303f2d134307fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3205f4878bc8b14cd5ae46b803dfad71

SHA1
304f908f6edf752c1a817636614a2391678f26b1

SHA256
aa0dbce7e58e5af537cb38d6f1e81b5a773062b5b0e0116dc6d7b4fda24ed56c

SHA512
5dbfce0ee9f1a96b1552c6daa1bdb7c59a8c71a717619944c786704a984aadd51105f373a2634a35e40c30c5273824f8f2efbd970e8477c7dbbcdaa16752b5eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
79fbd7d252ca6eb2969a10bade793fc0

SHA1
a7d72a7730b75bf9896768e0946b646e373355ed

SHA256
70856d59e53a7733b6c34856e1f6563b3a13ebcb4c7e37f1015a97d1be473924

SHA512
da4213b528d6f93d67ba479b402293d846de2e764b84dbfbf93a677a263c23af7b00179832228dda89c37f8960736278503ddaf7524334b31d90672fe14cbc84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe586b96.TMP

Filesize
203B

MD5
fb85e65893a2f4015c414ff240d82982

SHA1
1cb7c0c111da7baa2e14141faf73f5802cdf99d9

SHA256
ad041ea88d9dedfff4e57992c0c1f7d709893403d07929b95e4d7c92fb087ff0

SHA512
2cc52cb6266d85c353df32d360ff2dd8ccf04932d72e0baf9e6dc6cca2e137816c80629ec982d58aa9b81f260e161e91dc2552f523cccb04c351438c4265ae7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT~RFe584ce3.TMP

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
d69f33e915f598d81ad86c3d73b3d9a7

SHA1
5ca012b01a3f141273bd1ceeddc5746eb173a9f6

SHA256
c10200237df186258f29a3d4b56ed5ea199873bcbd3c8ef33b88abbcc05072ff

SHA512
1f67873938d3eb92cc8e281cb1752a42b356ccace2498cebc5657704cd5cd156102174439be94d01a19e83c991bd052416d50a582edea43f66f495e69ca8247d

Download Submit