ba7507f9f3732e4ea3b7be382bff909fdfcde6dc77939b3ef5ea60afd206a10a

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
13/02/2024, 23:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9a29f86d71ad26bb3b4f6dedf9b7ab77.html
Size

570B
MD5

9a29f86d71ad26bb3b4f6dedf9b7ab77
SHA1

fe0e3d430064b0a8b8952eb15c285027ae54b0b1
SHA256

ba7507f9f3732e4ea3b7be382bff909fdfcde6dc77939b3ef5ea60afd206a10a
SHA512

76f5402f5e5c5939f8f52cbbf91381fcee71e4bdb671578d84eeeeb9074197cf5cedc3b7fcb4bd38331ffb953ddcd6a707f62883563f3dbff2e29afbb63c140f

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1732	msedge.exe
1732	msedge.exe
3040	msedge.exe
3040	msedge.exe
5200	identity_helper.exe
5200	identity_helper.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3040 wrote to memory of 3416	3040	msedge.exe	85
PID 3040 wrote to memory of 3416	3040	msedge.exe	85
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 3980	3040	msedge.exe	87
PID 3040 wrote to memory of 1732	3040	msedge.exe	86
PID 3040 wrote to memory of 1732	3040	msedge.exe	86
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88
PID 3040 wrote to memory of 3376	3040	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9a29f86d71ad26bb3b4f6dedf9b7ab77.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe8dad46f8,0x7ffe8dad4708,0x7ffe8dad4718
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3860 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2248,17036601294189779265,8370679544601525928,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1876 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3612

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2928

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:384

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1386433ecc349475d39fb1e4f9e149a0

SHA1
f04f71ac77cb30f1d04fd16d42852322a8b2680f

SHA256
a7c79320a37d3516823f533e0ca73ed54fc4cdade9999b9827d06ea9f8916bbc

SHA512
fcd5449c58ead25955d01739929c42ffc89b9007bc2c8779c05271f2d053be66e05414c410738c35572ef31811aff908e7fe3dd7a9cef33c27acb308a420280e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
194KB

MD5
36104d04a9994182ba78be74c7ac3b0e

SHA1
0c049d44cd22468abb1d0711ec844e68297a7b3d

SHA256
ccde155056cdce86d7e51dfd4e8fb603e8d816224b1257adfcf9503139dd28f1

SHA512
8c115e3e5925fb01efd8dda889f4d5e890f6daaf40b10d5b8e3d9b19e15dadcb9dcf344f40c43f59a1f5428b3ee49e24e492cf0cb6826add1c03d21efdec52ba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
302bc99a9dce24b6c09bd410f49bc690

SHA1
e697253008461a5cdc0e27104a75b790e3eebb1f

SHA256
04f7147b0cb470cea41dc93c1ba3498ec2c9ba2783e935ad5e7b35651ae96d0d

SHA512
9ead2b5bcb0c8555cf5a9a419c2660fbbc64358f85d4ae69f00b343932d8f72553e4fd3ab57cc0847a003d0125c83df44821ba8b78cab060abb8c28c74cd399d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1a67273ec6583814ac922c26c0313d49

SHA1
79f33edf1d5ee43d6c7d8efc3c0f50aacc34e5ca

SHA256
74c0404b4d06f326713836cc099300e9e49c6642193a5c6dbfd5dd48b23b2296

SHA512
28f46ede3f334e2fb5444928f5c0a1798b125e230895b18ea5de22250c39df0c107baba7087ee40f2ee1e47acaeddc12bf64c54901d0e208c4cadb9913361f85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
5a1059dc5512904fed48768d99c0d700

SHA1
89f17490fdc4182120c95794330dde8c145857be

SHA256
5c92ef56a168f8492e5566eb2555c44fa289f63b3407eedc1712218f4e5b4634

SHA512
71bece658837e4b0fd89a2288d0f9e1eca60cc72374345cca62eb1e8dbe8a8567f943dd1164c33edfb85915f3f3def21d926dea79dbeedf1c0a952d237545ca7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
3d73159d63bfdeb41c4cb6efc268837a

SHA1
6e2ee44122382837ff69c70332989f4bfeba7de5

SHA256
c1fa63386a97ddb55139fdfe9f4740d17748266f08b41e3b8d7bd72aca605c94

SHA512
4a37a3f9f1dbe2be3fa32a5c90795f2d197298c2b640793726f3906f7c097a90471b8df92c1790f70ac174ba90b583293ce7e11f7217d4f5c12d89dfb7da9099

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
e664066e3aa135f185ed1c194b9fa1f8

SHA1
358ff3c6ad0580b8ae1e5ef2a89a4e597c2efdc5

SHA256
86e595be48dbc768a52d7ea62116036c024093e1302aced8c29dd6a2d9935617

SHA512
58710818b5f664006a5aa418da6c8cd3f709c2265bc161f81b9dfe6cdb8304fabaa4ce9deba419fe4281623feeeaa0321f481ae5855d347c6d8cf95968ee905e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
b6091a855e317351ae59289d46298ff6

SHA1
9fe0ba1e3b1cc53e86cc6e3eba6793d9b8fd6b78

SHA256
a586486f223c872df0cb9f6435df29560e82ed6de45804a0d11d93d834fb214b

SHA512
83f7142da56b7582d62e47c8cc1725c5d48f6c3fe430b7e3f6a98fe839ae97b6c692a6751fbbe0e434cc73e1278a198dcc5db5f8c97886b7312b9e63b82e29b3

Download Submit