hxxp://uA[.]com/133728326

Analysis

max time kernel
146s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
20-11-2023 08:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://uA.com/133728326

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3720	msedge.exe
3720	msedge.exe
948	msedge.exe
948	msedge.exe
1188	identity_helper.exe
1188	identity_helper.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 948 wrote to memory of 2668	948	msedge.exe	82
PID 948 wrote to memory of 2668	948	msedge.exe	82
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 4792	948	msedge.exe	89
PID 948 wrote to memory of 3720	948	msedge.exe	87
PID 948 wrote to memory of 3720	948	msedge.exe	87
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88
PID 948 wrote to memory of 4400	948	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://uA.com/133728326
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9c04846f8,0x7ff9c0484708,0x7ff9c0484718
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2828 /prefetch:8
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5604 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5604 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5312 /prefetch:1
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,7846124497672220389,13919932818276748128,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5680 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5848

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4464

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2972

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8f30b8232b170bdbc7d9c741c82c4a73

SHA1
9abfca17624e13728bd7fa6547e7e26e0695d411

SHA256
0916f816feace92a097267171f8aa8f944074530574a7aa1f9f0334899dfa3eb

SHA512
587d973b13b97c5b92621c776c18348a13ef451ccda32977baa529de33e47a27e7920a57fe7c4d0b2f0e4a8a3bca5c62cc5798cf97f19556028f88afb38b37be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
0bce9b9570a737b0d064f10aa7c57c0f

SHA1
719ae8032bb0b0a7bf8ff7169d13610d9ff7c355

SHA256
0f465e97dc2ad237a76cbcb9102c8f1665ed6bd111e6882f9daf4f07bb985cae

SHA512
673683f044109d285a6fdbb446d9b4c05ac6ef55bd2fa7fac64fe89ec69ec7818815d96256319cf4a528fbb4fb9b9068b8b91ee4940214e51adcd94464cd2bf5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
3c05bdc4fba27e06109e3ae35e07ff92

SHA1
44371b311f7c96e592e38b13cabe5cdff46881d0

SHA256
e43849f0fe93ec138ee9980fdee590ffac1506d6ccbc19dc233f408363146ecb

SHA512
8ebbc7d04df9c659adb2542ac3e9e28b402a1eae96f464ef6bcbb6603efe12757445fefcb53a381ca5a4214bdc135dd4b6cbb3931a7a985cc4ae1eeab5e29cb3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5bb3d27148d1d398a10e333e1a66876b

SHA1
c3a1b7c4125ea6351084e1b7ba8f7b2dedcfc2df

SHA256
5a00db9a9681e556bb6d851dc5eddccf80d66c6f8ea12bd0227fe991c19e2ead

SHA512
860b340d657d85d44eba8012fed06bc349fe3d6f8c31a5c7ddc61a0e0a92fba1e9ba9e31ea84b04e7e2a405d0ecfbf9d39a87532833fbf2b2573025c0b14a70c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7a5d9b38185078332f4de5709113a484

SHA1
fd8390d7e83de004a0d9c46b9beaaf44a504a04e

SHA256
4ff8555dc9ced5a2cb39cb410fa007896edc295c7ed4e81ef5bb6cf48e25ccf8

SHA512
7092bc8a5481b5d58648b7fcd3302cb85ddea899a92a1a6afa4d5af5790e8d0023178f3285e8a57f625f3d94a70ce67f056c8d835879cf86f264de683809f575

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
0b8abe9b2d273da395ec7c5c0f376f32

SHA1
d7b266fb7310cc71ab5fdb0ef68f5788e702f2ec

SHA256
3751deeb9ad3db03e6b42dedcac68c1c9c7926a2beeaaa0820397b6ddb734a99

SHA512
3dd503ddf2585038aa2fedc53d20bb9576f4619c3dc18089d7aba2c12dc0288447b2a481327c291456d7958488ba2e2d4028af4ca2d30e92807c8b1cdcffc404

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
ad8e19ca1225b464893072b380328d2e

SHA1
918ddc28b461660d55839be51e6df6362631799b

SHA256
8f98974656e7c45342da2828b138f988f8a1db9737791fa359fa667d7c766a5a

SHA512
6c7d364ed5ba494115055f9401901a39a17f37f98676c45f6d8e9898580389f2dd4dc3d4a50866cabd8d9aec2297e3f275ecf7b48501d31f37e8176aaf8c01a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
f6b84d980155bc6a507085f9532cc37c

SHA1
b4222a694a97e5d56597b086754a2f2848607430

SHA256
05c2dd1c9ee4dc4d86929c27d8cf78316a436fc99da8cdcd5382dda0071d4ad1

SHA512
9a1d4a8f9148088dfa0071d1f868a96fa2e7ba1f8603d196d1008bc83650de01fa66a4fd3b187347aa0d534c38035fd41228118f2973a6ac9ca6bc71289c0e9b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57dcb4.TMP

Filesize
1KB

MD5
dc7472e09114630359e3b636aef69f1b

SHA1
f17345858546b1def2ce5cc71843b36d7c94d7dd

SHA256
3d3eb76730364df638b681c118ed6691f46887b6059241324fb0ce3ebfad6911

SHA512
3628872dc24f2ffe08a07221a4256bc5bc880c232bfa19bec5c05eee74d5d5a1461c268b39df51911cdf46c2ddaafc472d7be5bd8d2c03f530b71c8c822efdbf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
d5a7e6bbb13ed0e1c367768ac916b596

SHA1
12f92bf98d70f769e749187271095b89eb1959ec

SHA256
27c09a869ca42104d3dc082b0d93e8c79d48faa4e48353bc9f01bea4721090c3

SHA512
05e851a40ba8b67713a821735fbb91638ffb0e19711992b3670b6c4545dbb310915fbb2351adc41e5ddeb6419b39d40056c3ad47cb304782fa66b933c4651b0b

Download Submit