2c7f93574f94f178dc7eecfed1fb316aaf4d5068a68c919b462be82e22ad5b12

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19/11/2024, 18:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

E0y1u2M9b1j0r36552922088.html
Size

534B
MD5

4e0fd2bc187b7ac44f061737761703f0
SHA1

19ad0f74c5796a39253f1a0925b5ae8b8d023a29
SHA256

2c7f93574f94f178dc7eecfed1fb316aaf4d5068a68c919b462be82e22ad5b12
SHA512

0d40af3c5f395ba4f95704c0145280fddf002685a131e90b6293764712ad4bb7defb71ae679de690caa56eb3649cc567d5d349e09ff830d4641a23334c1cd1ce

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4612	msedge.exe
4612	msedge.exe
1760	identity_helper.exe
1760	identity_helper.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4612 wrote to memory of 1460	4612	msedge.exe	83
PID 4612 wrote to memory of 1460	4612	msedge.exe	83
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4312	4612	msedge.exe	84
PID 4612 wrote to memory of 4796	4612	msedge.exe	85
PID 4612 wrote to memory of 4796	4612	msedge.exe	85
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86
PID 4612 wrote to memory of 4568	4612	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\E0y1u2M9b1j0r36552922088.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff83d9846f8,0x7ff83d984708,0x7ff83d984718
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2964 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4032 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5104 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,1208237963365893742,9359746397502349101,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4904 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4840

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4604

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5028

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
85ba073d7015b6ce7da19235a275f6da

SHA1
a23c8c2125e45a0788bac14423ae1f3eab92cf00

SHA256
5ad04b8c19bf43b550ad725202f79086168ecccabe791100fba203d9aa27e617

SHA512
eb4fd72d7030ea1a25af2b59769b671a5760735fb95d18145f036a8d9e6f42c903b34a7e606046c740c644fab0bb9f5b7335c1869b098f121579e71f10f5a9c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7de1bbdc1f9cf1a58ae1de4951ce8cb9

SHA1
010da169e15457c25bd80ef02d76a940c1210301

SHA256
6e390bbc0d03a652516705775e8e9a7b7936312a8a5bea407f9d7d9fa99d957e

SHA512
e4a33f2128883e71ab41e803e8b55d0ac17cbc51be3bde42bed157df24f10f34ad264f74ef3254dbe30d253aca03158fde21518c2b78aaa05dae8308b1c5f30c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
14270997ce962d27fa4ca7a6576fbd5b

SHA1
520d98366c10ab4066adef7339f4242d8c70a034

SHA256
de2faf5cb1a5e6c8ba5ffc82779406cca4e5b62b7b7a43c081e8ccb41997b6bf

SHA512
e9b804cdd2ec8b082852196da833938cb0746138146245f43df07d3ae9bd0b39e8ef1551ab555e54028b09d01451ea72e1eef0a0accc3f43f1330030e9d2596c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
b23b955c269481df44b45881acd10464

SHA1
7826f5e6d7df5f4dff2e09d268684441d1c66aab

SHA256
62aa447d97298e6e642f2027b4ab103577718fb020d2db506acdff518f1f9456

SHA512
a789c93aa757a98badcf1277fed5286ad3428f67d027a6860ab5e7785e12d98890d11d3f8e74ada8cec6fccd4c08fdfc4144946a61efea632b1983633eef1c19

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
aa89370737cc308201e0b5f3ce5a8764

SHA1
35948de60ec096b46fbc16b10a19f6f586e5617e

SHA256
23c7fb1b0e3ee7b7ec75305adff0fe53d5bde3282ae3a5ac714454c6b1ee5ae1

SHA512
5fefa5dabd0930be76e9299b63639c33b8484788023ade5c50bcb39dba8796a32f9ed218213e36558b277cd587ab3e1f43089fab1df2818c267c210b1c6d019c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
5b1569abc7e54202d9d2b6c915d9ee6d

SHA1
6512c36a88208cb8998fee4302c32f95e4122f24

SHA256
4fc91c0c6322f374e8c12efc3306897f50e18a490533eb226572b1198b4eb546

SHA512
a1ac1924a8395ddbfccfbe727a19fbba4780bc29060fb44b3c7635eca72b660a260d1f9fbf492a6fab99138bdb301b6355fd60120963847f75b75fb633b9df11

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
f678014183e5d588a1b9b129441f1988

SHA1
4db71dea742f63bd34e48d8eb2f1ea02b14263c0

SHA256
e286d461f05d709a40cae6664465e5a47cdcf055fd0cfef2c03da99414111b75

SHA512
479024334689131a37d640f11be96952a297436056b10aa2674a9746d121e9a45c0276b6fac8104109ba66bae6c371218859a5b75f521596885aa70afb357c5a

Download Submit