hxxp://contratodigitalweb[.]com

Analysis

max time kernel
146s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
21/08/2023, 17:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://contratodigitalweb.com

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3484	msedge.exe
3484	msedge.exe
5028	msedge.exe
5028	msedge.exe
3152	identity_helper.exe
3152	identity_helper.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5028 wrote to memory of 2532	5028	msedge.exe	80
PID 5028 wrote to memory of 2532	5028	msedge.exe	80
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 4736	5028	msedge.exe	81
PID 5028 wrote to memory of 3484	5028	msedge.exe	82
PID 5028 wrote to memory of 3484	5028	msedge.exe	82
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83
PID 5028 wrote to memory of 2840	5028	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://contratodigitalweb.com
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f3d646f8,0x7ff8f3d64708,0x7ff8f3d64718
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3168 /prefetch:1
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4984 /prefetch:8
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4984 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:2764
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe" ms-settings:dateandtime
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4600 /prefetch:1
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5016 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,12263260320809475349,2521432171702572217,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4620 /prefetch:1
  2⤵
  PID:4984

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4388

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4712

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
1⤵
PID:4780

C:\Windows\system32\SystemSettingsAdminFlows.exe
"C:\Windows\system32\SystemSettingsAdminFlows.exe" ForceTimeSync 1
1⤵
PID:4724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a7ad9bb1054aa03e39b3554833d0c3ec

SHA1
cbd5b99ca100bc2f1292df23bf8e2a5a6f9640d9

SHA256
0c3eae39386b4117ad26187afc4933e254468cd12d813271f4b7420cee73c189

SHA512
d1d0b77e0bc412b4ee687e849531a7c9b70200d45d0bdbf38357b6fc59af835522e749b2fd8c2d4cde73518970568c38d73416c97381a11cc6029c14b1678276

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
89ddfcc75ca4e48cf004b1398bf422f7

SHA1
dc5398440c02b6d071911a16d80f3507850ed31b

SHA256
7fc4cb0c11dddcbf66d6c216afa0c48bb73885e2445e9337ceb532d8c52fd3c0

SHA512
b4b4ead80c237a0217aa3b1534dab8f0e0f418446dae4baf98e7650c82629f7b5d983e1c1cb5512301bb11510eee50aa479556c5d147bca49275d3cc60ca766d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7c61a15ba7680caa53e194b1f8c8fc4d

SHA1
432b37ce957f6427b438c5a2536cca1e5032b4b7

SHA256
0ead8245019f7cbe31be5928423ed9b3bc721761ee24d89d3ae66506a7ba30ad

SHA512
81eda4534d2b03d26eb54301f4a60a0b08990f9ef6229101b8f65b26fc37cf15050b47cf9fae8beab381669a34c589e573cfa8a556d61e9dc540ff73a30b1afb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
733710c2685deb0e469afccfcb3dfd5e

SHA1
4368501619422c2aec6a27f4a5dff4b10dcaf4e1

SHA256
e38fb0f55571cc06889aaedb8c5f610f382325ec2b6eefc3935407ee73688fa9

SHA512
47b4d8a745942923b4093c1d6225a1d937f9d7bd6c8654a6d2f509d55045459178d6bb05d179e48c45887e407add0ea1d151caa0ea6185050a86e91ba8011119

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5ec7df1b835c89043cbd54b6f3a392a0

SHA1
ea5f1911b597fb0c10c0bfa1795b6010789ec7b1

SHA256
1b5ec68794fb4073a496dea40cd2661f6dd9e34e8c4dce67ca73bb5442f7c8b5

SHA512
b333d501047743d0bc151ed90811735adfeecc2d128566e0d8d348274ec7dbb8daa92eacd3b9d12f752427dece5adc017dcb70eea4dffa6a28d4b3d7ce3c1ab9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
41a737fd368c49ad12aed4c33e10abed

SHA1
42f818b23c1adba4c5a850247f576bc1605e1479

SHA256
fd014e7aef5467fcb217b3ced2dbef34fbd4535b3659db36c90c2de67b542ac4

SHA512
98ba1a952b15efceccdd21d0a7904ca7c0aad3fcc090bc658cdf0d7efbf2f63de68b12af36aa2092900ee42679bf869e712f5c09d35c64bce5d792703983f3a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
2f190a634b1dc20571bcd4e5db913c85

SHA1
49a4c393f48cf7a745eff1fbe29858d1b23605b4

SHA256
4b16307493070c2ec3aec2a6047c6c2360ca46541dd4895ad22a12359ac61644

SHA512
665cdc91197cce111e0358cd161b837ebf02c5d88fc4b827d5d5870785763339a89f8b30f6d9b84c67fc0bdf58b8ecb8d4b911226f61e69a1a1cc529eef83b08

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
e62cc4051e1f8eaa0abda5d730a2496b

SHA1
d15346e40b196bc313cbfe5ac96b3c90b83345be

SHA256
ffb5b740b8777d010f0d32a120092084c3cd32eaceb937188d698ddc22df2fcb

SHA512
3e8f6d89c7c153177b2149d86cd8602ceafedf66f5335a86b19dfa46fc38c47f6ff9a272c3b71b4464a5921ebdf2461fba25692ca916b9715bac520bf1e81a22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
6bb27f17ea7fe0596cbe48e522cfacd6

SHA1
b840ddbc0fe352c6040bd1ba3f5c2ed896e742d8

SHA256
8d1a2257a77cfcda62f46842c163bba60c780d926f910e01ad4c404d4a63c69c

SHA512
9d922726279c2c04fd4fec0f4154e31d15d8d3afa09ef6a0f9c9141f5cb07a76899e84a925edea9a8b65bf409d6f3f33646a9c1d77037d945ee21e5fbb28a8f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
b4b69ec7b0fc142db3fa086f9b95be12

SHA1
b3848d97b99731bfc281dede41fb39369ccc2bd9

SHA256
dc78a33a36fceab4abbcf996606a14ad7e4096e0ec395f0b7724c20a44f40e6f

SHA512
7afc05ea8d79fb96fec1c7b2fd0010337a45658c9c2c7bae3e4d89f760d5840a63676842a743f395ae7c52d730ea0e57ca5304753acd756d48b4e876a87a4956

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
0f51ed7fb5d986abf68341b922956764

SHA1
5c3a35bf4782edb4d34dd37a95c3a0378a33dfb5

SHA256
c1d878fc9babf62ca8a7eece2c1877a5e82cc25d5777326a3f621d7528b7bb6c

SHA512
35f6004fa87967ce0fe385d65d05d57815e3505cb83e656ccd112284aa09ce79bc863fe8adc9d7b2c1aab46b7dbff11ef5e295e03aaa741758dbd683095f6006

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
49ef4f6c4d28bb1fd81bde4b0c3330fb

SHA1
624f66beb0fb4a826314bb9faf315d40fd88328d

SHA256
786b1a878dd7828bef675d647e482ba390e8f0e4bec6571291a19a47d8f37e89

SHA512
0618a2312d56dae7a1c179acacea9318cf6ae2642006fac54985be5647a1f08ce081ce914c7b0f41aac429f46f2004269b7f6a153274fc89ea1336047d5a02aa

Download Submit