2d84228081a20b6921a7d7d36862a48c920da03f87e7475d54d39cc4bb2917c4

Analysis

max time kernel
145s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
08/07/2024, 23:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

50sjv30/3html.htm
Size

3KB
MD5

04eaa49719a52239345f6523ae1fbbac
SHA1

36e318bd57ac2899344f2c0ef7f0a53c512ce3e4
SHA256

685c1dfa5cf006330a432620fdee515e7a7968c88b8fa9eba80411446860343d
SHA512

6e3512de5a91ff6e9947fbbc3572f20cbd28dd4e9d33871a532d658ac21048555574576dbe5d962be25d671d2ff2eda5892c506e14044320f56b94328e6c5f97

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4088	msedge.exe
4088	msedge.exe
5016	msedge.exe
5016	msedge.exe
2864	identity_helper.exe
2864	identity_helper.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5016 wrote to memory of 2504	5016	msedge.exe	83
PID 5016 wrote to memory of 2504	5016	msedge.exe	83
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 2416	5016	msedge.exe	85
PID 5016 wrote to memory of 4088	5016	msedge.exe	86
PID 5016 wrote to memory of 4088	5016	msedge.exe	86
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87
PID 5016 wrote to memory of 4712	5016	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\50sjv30\3html.htm
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff85baa46f8,0x7ff85baa4708,0x7ff85baa4718
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4092 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5516 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1136 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3992 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6472 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,12706586130664802233,4224523476296273424,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7092 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2420

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1708

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2316

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
210676dde5c0bd984dc057e2333e1075

SHA1
2d2f8c14ee48a2580f852db7ac605f81b5b1399a

SHA256
2a89d71b4ddd34734b16d91ebd8ea68b760f321baccdd4963f91b8d3507a3fb5

SHA512
aeb81804cac5b17a5d1e55327f62df7645e9bbbfa8cad1401e7382628341a939b7aedc749b2412c06174a9e3fcdd5248d6df9b5d3f56c53232d17e59277ab017

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f4e6521c03f1bc16d91d99c059cc5424

SHA1
043665051c486192a6eefe6d0632cf34ae8e89ad

SHA256
7759c346539367b2f80e78abca170f09731caa169e3462f11eda84c3f1ca63d1

SHA512
0bb4f628da6d715910161439685052409be54435e192cb4105191472bb14a33724592df24686d1655e9ba9572bd3dff8f46e211c0310e16bfe2ac949c49fbc5e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
29KB

MD5
ce0a426ce1e09f068caec06014c96608

SHA1
66cfa0bfe2b2a177683743a178a1d54d62a72ca5

SHA256
c9386f78a001dd7c580322eb66dd70b24ca35ebe80b7f513bf0250334036535a

SHA512
31049c4761f88bfb4f90e1271ff243c9fc6abc69c263a152345594f082e91aedbb394a3a7b20570cfc23df0a43a4b1b93df5e9a61fb222051b5acf27fea66338

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
75875dce8fc5e2b3f0971f4867664c33

SHA1
3df9439077393d2184f730e1630acc2f65a3d0ad

SHA256
68c6977c43d6a46f9bbcbca0ff1a0d4e725a6d40c5bdb088c8a3d46eacaa3b85

SHA512
2a525875417e527de4a07a10a0146a4b0d6ce2f36ce92901910d65398554963c2cc94434d567064dc576a3f6885e4ebd4f7621da5931ece30d29cb00e4347525

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
760a2538659d2e3ae0afcb149b443bff

SHA1
afbd21c37a3bd452650cd2251db623293778d75f

SHA256
b09eb67dcb500462f12ba44e83d77550748550b7658576b1de6107e745e879f2

SHA512
e806339698cfef412d93dcf5b03803f6a0add01c33d73a533dc0774a77896d2d1c4446c1038e69b2c20541da2fb4bbbc5591c9277313d7b5af19ec90a5bd1872

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
bff36aa107dc56c6c0f8c5a9d1e1b8af

SHA1
b8948cfb64b04639486acd54fcc539f35cf17cd0

SHA256
1b9816ac98db257d760bd0c44b6cd21d103c6409fdbccf26c4eb8bc95f21b05c

SHA512
8fc9138d0c98b6cc863fa0b79ab12fd79cde57c51fcb04487fb5dc0f829f6710c30e57ff073388a2112ea057d1129b1b100ec0f93c02509033df31a15f7f1d3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
43a03550c0a82b2a736cf15b38abdb31

SHA1
76dccff5804edda81bd5c433ee06cb252426b0c4

SHA256
d40f950e53ea2c9ad2045a887327088bbee606f96b0d26499e2b55e6660d451c

SHA512
0626ced0c69223721068400e28da6f34d238624c179e442e7f8f74f0f63bb43c57251e5b89d4c2bdb2536a55f298dda5278477c806bb93f10f7a5ea01a79145f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
5b774d8fc7d97dc746957198380828c5

SHA1
0ff32acda244c2e8b515af2ae772657589d3aa7c

SHA256
d86e2d108bec0b801c72d6c78f3eca7c46f81e4dfecf00ee7b8e15ab6622810b

SHA512
60e486df1096fa68065b82222d8335f81074457364f24f74aeaf16e3fb07f5de1d31d5685cbb275a145a7bbcae4c3739be30f026e74f12e1cd7940b253f183bd

Download Submit