e5edd4dd80ec28f97f3747eb1328581b0e0d42a147459991728708de8c9cf087

Analysis

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15/03/2024, 18:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cc13f986565b34d3473c0ffefac0e83a.html
Size

57KB
MD5

cc13f986565b34d3473c0ffefac0e83a
SHA1

04b5a0d25240580644cb2ea8dd246a6811d088d4
SHA256

e5edd4dd80ec28f97f3747eb1328581b0e0d42a147459991728708de8c9cf087
SHA512

ad65362add5c8a1d5dd7aee3c12bb8d7600bf48cca9ed74b58a0b2b34870b05d4623a92d814cba1395da15b3392b255f8c525f9fc861bc2bc6e8870b13f15889
SSDEEP

1536:gQZBCCOdo0IxCKZCKfAf0f5fiflfAfkfKfEfgfJfJfhfcfBfsftfDfufqfmfLfD0:gk2y0IxvI8hqtYcCMohRZ0J01rWiejr0

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
1236	msedge.exe
1236	msedge.exe
5624	identity_helper.exe
5624	identity_helper.exe
5600	msedge.exe
5600	msedge.exe
5600	msedge.exe
5600	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1236 wrote to memory of 1112	1236	msedge.exe	88
PID 1236 wrote to memory of 1112	1236	msedge.exe	88
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 4400	1236	msedge.exe	90
PID 1236 wrote to memory of 4400	1236	msedge.exe	90
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\cc13f986565b34d3473c0ffefac0e83a.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe93f446f8,0x7ffe93f44708,0x7ffe93f44718
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2888 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6456 /prefetch:1
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1948 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5600

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3448

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3864

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
73c8d54f775a1b870efd00cb75baf547

SHA1
33024c5b7573c9079a3b2beba9d85e3ba35e6b0e

SHA256
1ce86be0476a2a9e409fcb817126285bc4ad83efd03ee06a2f86910fe18d4d94

SHA512
191344f5830cfea68499bd49073ffa7215a42265a9629d203d07849b2417c0ffdbdbf288bf2c669e91009a0d7e8bd6a6b378c92fc283049141231ca7bf4da3b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4b206e54d55dcb61072236144d1f90f8

SHA1
c2600831112447369e5b557e249f86611b05287d

SHA256
87bf9a4c3564eb3d8bef70450da843ae6003271222734c4d28d9961c52782e0b

SHA512
c9e8d2452368873e0622b002a0c2f8a2714b5897a09475738a9f9740122d716a9f0d3841725230d58e039564c820d32a6f3a675a7bb04bd163bab53dcb4e22f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
198KB

MD5
06d38d9bf028710762491328778f9db6

SHA1
83e1b6cbaad5ca5f6dc63453da324f8df28de193

SHA256
91558d69c027808e375e11c80166dc6ba245fbcfce715c9588decc55b4a33dad

SHA512
b197e5f92add72688396a07246ee9842a3b0de36508aa57f0254531cb109c77d0392e00ea28e006f9fbab1b8fee9b333998946de47ca7526b631e8c810780781

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
cbcec79c14d7e6dfa6b585f33c38a30e

SHA1
e630b35adccf6734e2854068525f97160af7dce3

SHA256
ca65cf8c11cf9329bcd3a08843c3875b20a6142677c3085b500d113dc8c45f44

SHA512
fa2af63685d2f5bb78cf7caa91ea24c8f6cfd3e5bb34c9862b89142ef923a13fe4f8331756c16a64f8089ca2c3397fa90efa563ed325900cf743604c63eba5b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
813e4d1f99bdc9dd7f91f17a98389195

SHA1
eaf38a006fbb880e283d6e278ae83f44ddb0c141

SHA256
13dbecdbf719f364b40628e536a4099aa69cbed89baea0dba1a824c8094ee926

SHA512
76113b6325d6e77bbda30959fe4af2ca2c57eae4cdf9b410a4f5a24b88d2d06ca36b3f0638bdd05ebf6eb737f4eb20cb72d26ed37e6c11479d5faaa620aded8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8f5b3e230c64e54d45d899c7a38945dc

SHA1
66bef281bb4a2c1165146310d4bab4efdd8ce008

SHA256
8c4397f599daa6ec0bc2e810b3663be883b829b8fde731f00a1164bd94041399

SHA512
5d01b8c73f77a42f71b87ff5b9377f0a56f95bdd800e817961841a231568cf96ffb1bb4ef9b98c2c8abea008452b6cd557e8a1e320c257456c79d2181a7aa94b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3231ae28ac0d12371090b7027b529c8d

SHA1
70f5b6ebf50984315c2d9604b05afc9185272392

SHA256
811c867f72c741a88cc30a84cfcf919e82e41ad05e72a37a360ac67aebeb4819

SHA512
d9d0542ac2750bf044bb6ae3346359e0efeb596a52e481accc8957d7be81033e7531a1e2f733943770e1532c2a207c4b9eddd4bda66b628fcc47bfe4593e2b97

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
a726da731699ebb0e9ab33dc27b240e7

SHA1
8e99b5f8321316670861d2777af3462f19bd77fc

SHA256
0df4f7fabcfa091e1680b5dcfba8c80f319c8874d5048c4e6513e9c44936d4a0

SHA512
4d80b2e03fc7c8cc3b86e865ef5e74fb43957c51c8d178c34a2b95dbe122e2d94c593bc2c8be4db38e3d519f426f7250c8c20f48f94ecd19dc365fa95f41c414

Download Submit