hxxps://ucix-global[.]ups[.]com/customer/auth?uid=4ac77aeb-ab27-4840-9b3d-a80a8d9a9b9f&tId=53d76913-32f3-40b3-8329-4b409459d80c&cId=%2BnumhfK5b7dInwGvZuxSsw%3D%3D&mId=O0AW2y%2F0ECbROylmVJuqaQ%3D%3D&lang=en&scId=%2BnumhfK5b7dInwGvZuxSsw%3D%3D

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06/10/2024, 09:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://ucix-global.ups.com/customer/auth?uid=4ac77aeb-ab27-4840-9b3d-a80a8d9a9b9f&tId=53d76913-32f3-40b3-8329-4b409459d80c&cId=%2BnumhfK5b7dInwGvZuxSsw%3D%3D&mId=O0AW2y%2F0ECbROylmVJuqaQ%3D%3D&lang=en&scId=%2BnumhfK5b7dInwGvZuxSsw%3D%3D

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4492	msedge.exe
4492	msedge.exe
4816	msedge.exe
4816	msedge.exe
4688	identity_helper.exe
4688	identity_helper.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4816 wrote to memory of 3484	4816	msedge.exe	82
PID 4816 wrote to memory of 3484	4816	msedge.exe	82
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 3080	4816	msedge.exe	83
PID 4816 wrote to memory of 4492	4816	msedge.exe	84
PID 4816 wrote to memory of 4492	4816	msedge.exe	84
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85
PID 4816 wrote to memory of 1116	4816	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://ucix-global.ups.com/customer/auth?uid=4ac77aeb-ab27-4840-9b3d-a80a8d9a9b9f&tId=53d76913-32f3-40b3-8329-4b409459d80c&cId=%2BnumhfK5b7dInwGvZuxSsw%3D%3D&mId=O0AW2y%2F0ECbROylmVJuqaQ%3D%3D&lang=en&scId=%2BnumhfK5b7dInwGvZuxSsw%3D%3D
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe3c4146f8,0x7ffe3c414708,0x7ffe3c414718
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,4101375019302260954,7896875471762565884,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,4101375019302260954,7896875471762565884,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,4101375019302260954,7896875471762565884,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2836 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4101375019302260954,7896875471762565884,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4101375019302260954,7896875471762565884,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,4101375019302260954,7896875471762565884,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5568 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,4101375019302260954,7896875471762565884,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5568 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4101375019302260954,7896875471762565884,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:1
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4101375019302260954,7896875471762565884,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4101375019302260954,7896875471762565884,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3964 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4101375019302260954,7896875471762565884,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,4101375019302260954,7896875471762565884,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1708 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4684

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3060

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3908

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
111c361619c017b5d09a13a56938bd54

SHA1
e02b363a8ceb95751623f25025a9299a2c931e07

SHA256
d7be4042a1e3511b0dbf0ab5c493245e4ac314440a4ae0732813db01a21ef8bc

SHA512
fc16a4ad0b56899b82d05114d7b0ca8ee610cdba6ff0b6a67dea44faf17b3105109335359b78c0a59c9011a13152744a7f5d4f6a5b66ea519df750ef03f622b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
983cbc1f706a155d63496ebc4d66515e

SHA1
223d0071718b80cad9239e58c5e8e64df6e2a2fe

SHA256
cc34b8f8e3f4bfe4c9a227d88f56ea2dd276ca3ac81df622ff5e9a8ec46b951c

SHA512
d9cf2ca46d9379902730c81e615a3eb694873ffd535c6bb3ded2dc97cdbbfb71051ab11a07754ed6f610f04285605b702b5a48a6cfda3ee3287230c41c9c45cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2de98b04-8c68-470e-b3db-8f1f1254833b.tmp

Filesize
5KB

MD5
fd5a64a2fe89ee56e4e07aa9c73abb56

SHA1
cb207af25b0031eec96a3e399d94d9b3cdf24a95

SHA256
0fa47d43934c38daecd5854faa2dde52801259239858fa53083833aa003bfb6e

SHA512
3d9950b296f5c9997dc8eb3425ac248052db176f04fd1e078fbeae567481a99acbb396dbbae6929718ff9a417276bf4355561711f2a4ed84a3cc9e61a48f288c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
6b154cd39d417e06277c16493e97d8d9

SHA1
ba763785536faa2301814d55cbd4db309e698bf3

SHA256
7804907abbedbe07869dbc03fc2d1aefa1a42bacc0fc1e04896ba8a621e1ccf2

SHA512
0af1ed038e63ac826f7e87cd5afec8a0d0ddd94b6f82fa69dff77b18c14b332d1713b02892eb369d9162a5155ea37165b31e35dfc2bda2118579155b6e0ac558

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
640B

MD5
daf2e6e36eaa47ca7f96439555963a08

SHA1
95a012a6703007b73a5b8264f23a30e696008b0e

SHA256
e77fb78f8e8b1cc04d6a3d32c5e9d719c0e45bf2ba0944292986d51c86846edc

SHA512
6933b6ff771de22e5d9d194e4e310ad94f5d5ade66c2c6f62567dbf9949c70502d41cd9993781bed22626474e13ab9a786e68bc9889bf9ce9ffa6e2ca47b2861

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
14f6fb93bb27d06a62501c2e0f94d3b0

SHA1
8abcaa1b2944da9c94bc6ffa30390a68a2158774

SHA256
b3dea9107afacff85c2454ed6a5cf59dcc892d4fda0cbb199b9deff6bc1e2ac2

SHA512
dc62fb66fa87dd4bd9735a0433eb4fcf34de4e0ffafec2b708878f1444238baebd7b969e4b5603267691aa7e934451ee74fc470e792070742d6a5f5d056607b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1aff91609a3afee836db97bd51e03d90

SHA1
c896322f5fe3ceca66034167cd3dee195ae88b28

SHA256
64ba955009fee14ff9f3b4cfc32678cfcc19afcabdf12de6622bd75e2952bbe5

SHA512
b0c0a58bbe04aa97b9602a8314f241fc19be83c07957c630e466e9337eec58666e70d1af7d66eacdf5947d01809a8047c459222c5c4d32e22034bdf211cfaf21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
366B

MD5
40c3996b40bac399debb1f8ab660edba

SHA1
bdac2107f1a7bddae1d668ee2ba3518d379387f6

SHA256
73992654a24bb6e72053bbc6d38e062c5184184630c5884a256ca3d6c38c1b43

SHA512
311a2a7d7364b769c0498877acf15df59e6affcd484ff25b6551aa99c59c15f5981dd46a98c4a894fec3875498aaac451ac9990f79cd92a49260d5f66df86c6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57dff0.TMP

Filesize
201B

MD5
5fa6c183ca9fafdafd347a886959a601

SHA1
31120b3fee08c571a3ec0241b4ac37d0e0e8d21f

SHA256
85159890053981aee9f68282ce915d2c5ceb06affe296e287fbe57cba55eb1b0

SHA512
bebe8bd620229015ce3cc4f54c780e0e6e6cf8a95f82eb056c4c7a888cdee36dffb4084435a5646c039b6733d19b679bad4acd5ec22f15af889ec7311133018a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
1c587ffb5eb25e9b5f0b51c13048ddf1

SHA1
61fe16ef2f99be179d16570c807b74a7f7f5612f

SHA256
7e3d5ab670ccf6a007a8200df77c9db9b85d8a6339fd740373ad900efc8ae792

SHA512
781705aa501f032fa7be385bbb996e7f4eb02b6d765e8e73e3304c0d239c22df39a189af2bf2c7d0f7dffca4b164dd7c0587602736876054776b93279879ba03

Download Submit