011da5c0f56adb0b9122fbb0cbaafcf4e63253487cfadf6059eda7b3d50f6630

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25-08-2024 09:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c064aa5b915db14ce29bd166f566f1b6_JaffaCakes118.html
Size

61KB
MD5

c064aa5b915db14ce29bd166f566f1b6
SHA1

b1d0036f451b8df2c91eb304e207dd22728ab415
SHA256

011da5c0f56adb0b9122fbb0cbaafcf4e63253487cfadf6059eda7b3d50f6630
SHA512

d8c24717dc1dd52fd864e6f80541528a06c2fc910caf5188141098e615e84ed0320bc3cc3f255460cfc86e319d1a4fccd0a203673fe093fbcba31b1ad22d063d
SSDEEP

1536:BOjQb8mT/re9sDmlypBrvmFNlqEjKKAhD7KkQBtRQ7:p/K9sDkypBrvmF4BD7/QBtRQ7

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5076	msedge.exe
5076	msedge.exe
2000	msedge.exe
2000	msedge.exe
1512	identity_helper.exe
1512	identity_helper.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2000 wrote to memory of 3296	2000	msedge.exe	84
PID 2000 wrote to memory of 3296	2000	msedge.exe	84
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 1556	2000	msedge.exe	85
PID 2000 wrote to memory of 5076	2000	msedge.exe	86
PID 2000 wrote to memory of 5076	2000	msedge.exe	86
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87
PID 2000 wrote to memory of 2256	2000	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c064aa5b915db14ce29bd166f566f1b6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff882f246f8,0x7ff882f24708,0x7ff882f24718
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2872 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4652 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4640 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4768 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4768 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4060 /prefetch:1
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,7181812525060748310,2563967915602138657,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3484

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4548

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3400

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7114a6cd851f9bf56cf771c37d664a2

SHA1
769c5d04fd83e583f15ab1ef659de8f883ecab8a

SHA256
d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e

SHA512
33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
719923124ee00fb57378e0ebcbe894f7

SHA1
cc356a7d27b8b27dc33f21bd4990f286ee13a9f9

SHA256
aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808

SHA512
a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
402caab05a479b0a1db556c1ad6c510b

SHA1
d4d9eb145c6a36cd2a76985d1629e40ca03a07d9

SHA256
e2165e6cc6e073cdb7b04df153ee9b8b96cf3cd52c805ec5588e4261a496888f

SHA512
699c174eb1d3968f55fcd6ad7d0da940732d7a52ad6da57189caa02e66ebe64c79a8549d76c242d756a8351f1671d434823aed84bdbc6bc887e2c7fdfe4f892d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
2de534ab05cacd742d01ba4bc2ec7955

SHA1
13305ef5a8c9bf21f4e0dea569b01e840a758e09

SHA256
d8c6edb1f41a4118107a784f050c75cf844be151e4b7fe9d7938abe83ba113b8

SHA512
247b56e231379cf3803cea0db9ef6bd353e6fdafca95e46216485f2c9f043f7f75f6129e3a142e23e627c43cc87cc3abe20bb2a8a8993e037bab63f8700105dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2a8e2a6522c79ae7b660bd8061f9efa2

SHA1
3a1f337bc3d99ef21bbce14323b4417bc2e3453e

SHA256
877c2821199ad4cdd6caa56f12f1a053c2c85054a69241c8405b4d52c38ca149

SHA512
2a819712dc0615074432a4359566317eda068842f57b2696317458a6a74594ab4df1a3f13e7aaf8355d994b055519229ce4426edab50ae1647b8de2c09fd143c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f50ddadd-0eff-49f3-acf2-4a82bbb3c3a6.tmp

Filesize
5KB

MD5
f3fc1fc17c459d2159d3c51ecea59ddb

SHA1
1f0f47de2030dd68bd0a0b2e0da896aef5d559f9

SHA256
c55796f5b56b60748a88c934be09d6ba8b446756b1fd8f96b348c0a76a3b6db2

SHA512
997aa6edf5d92ebb15e847ae79166c466cf90b4243e1f05e66e5cb19d4f5133f12e74998fbf1158e96d4029d95a2127070c62bb8b28adb862962e510fc525ed0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d9037f2a-0f6a-427c-ad8c-cc0e98f385d7.tmp

Filesize
10KB

MD5
ff81b458274f6815b00040339b43681b

SHA1
ffb8b783c452ccc47d15cfea6aa255a5384c1b18

SHA256
1c099c1624372a9e1259eef306d06f82af65407d3c0d563c1902f1197b5767fe

SHA512
5d6c78e20f4821e0d11a3d0ab98f277aed32c23c1812ae3a4e56c6bf709c190aacb0361829a93006afb8b519cfd00c0f4d9eb52c9162028346941bad19bcb2f0

Download Submit