edfb7b152d9ae1efa15ff33db652918d389e968954cbe6dd750ab9610919a96b

Analysis

max time kernel
600s
max time network
485s
platform
windows10-2004_x64
resource
win10v2004-20240426-es
resource tags

arch:x64arch:x86image:win10v2004-20240426-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
05/06/2024, 15:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

js.html
Size

4KB
MD5

5c0c24eeb87398482a061fb98062853d
SHA1

8ae268d6ed6f4439378c664a8ee72c56ec4f2da5
SHA256

edfb7b152d9ae1efa15ff33db652918d389e968954cbe6dd750ab9610919a96b
SHA512

d384a65c707b6192d661b50edd9f875e3dcb2a9ec0ad48b0056547d821a19c8a58e77b3a3bf46c7d97ffd94fa72b889f2ec654b805d285f65e76656e3e3ef5c6
SSDEEP

96:91CreCQ1cjUmcCCcCuC0lOCYCQ5cMlr9gORN4cBP3Fu:91CKCQ1cjUmcCCcCuC0lOCYCQ5cM9PRI

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3852	msedge.exe
3852	msedge.exe
4936	msedge.exe
4936	msedge.exe
4400	identity_helper.exe
4400	identity_helper.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 3408	4936	msedge.exe	81
PID 4936 wrote to memory of 3408	4936	msedge.exe	81
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 852	4936	msedge.exe	82
PID 4936 wrote to memory of 3852	4936	msedge.exe	83
PID 4936 wrote to memory of 3852	4936	msedge.exe	83
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84
PID 4936 wrote to memory of 3632	4936	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\js.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff88c2546f8,0x7ff88c254708,0x7ff88c254718
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --service-sandbox-type=utility --mojo-platform-channel-handle=2704 /prefetch:8
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4112 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=4876 /prefetch:8
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=4876 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5044 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1644 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5604 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4516145377189532139,9740264712546238913,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:1272

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4872

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1980

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ae54e9db2e89f2c54da8cc0bfcbd26bd

SHA1
a88af6c673609ecbc51a1a60dfbc8577830d2b5d

SHA256
5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af

SHA512
e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f53207a5ca2ef5c7e976cbb3cb26d870

SHA1
49a8cc44f53da77bb3dfb36fc7676ed54675db43

SHA256
19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23

SHA512
be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
306B

MD5
2294419e309d005c73007e2db31bbb9f

SHA1
a2a54ce2786f0e83fbeae40095f63f92798f34bf

SHA256
d796f95a015579c8274358c9c86fcd63d1bbbc62e57725a7bb6818483b72b287

SHA512
8c6096f4ddd00f8a1c33106d058d302a5ffc2bde985bf6f742560296719b78afd089d520b9e572237dba6fb1cda59f16a38ea369181ded76fac6f868de9a5ce7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
8a4363930c10ad16784d2b5234458251

SHA1
a23025a2909316b695cfcd25d9ab7313998d1a4c

SHA256
87a7cfeb1eab4bc88a3bf1ee05ce2e5d850599f50231436e15ca16240ddd8024

SHA512
e5074547a8d4d536632cba95d5371c38a8d0cbe361647639c7692ed998516b20157d6f5f384b8102b1e925ba52bca817e54786c219599709e0980c5cba442255

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3e8d37a4f4c159f07036beb25a39401b

SHA1
39d7bc4e076354a8fff55bed7cc81b03adfa0b54

SHA256
13667b32759852f0c74c039dc8cc6b848891bc041102b082038004de43ef1dd8

SHA512
4727e7038db61bf2b908e91b1d3f63bab80c79fb6cbd188c6a8a52e4bb02def673d43b503a8fda09227278288332522fe31eebade49d2b689be8a8992ef234ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
eeadfc8ab8e91a3ca8adf13a5d1e895d

SHA1
9e2f75e0f20f01d1bd00f0daaa30af13299ac161

SHA256
fb4de4e34f8a178e1a918fe19ea920b5bf933144a475fa403483893834d80dc3

SHA512
3e100ffb9e7c51fefeac27ce4cfd660bb9f14d75b5ef0ee640594fef4da6235b67f009ade5e1974cbe23f77b3cde8aa27f252173184ce07090172fd444e2390f

Download Submit