hxxp://www[.]glasscubes[.]com

Analysis

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
18/01/2024, 11:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://www.glasscubes.com

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3952	msedge.exe
3952	msedge.exe
2372	msedge.exe
2372	msedge.exe
1576	identity_helper.exe
1576	identity_helper.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2372 wrote to memory of 1812	2372	msedge.exe	89
PID 2372 wrote to memory of 1812	2372	msedge.exe	89
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 4884	2372	msedge.exe	92
PID 2372 wrote to memory of 3952	2372	msedge.exe	91
PID 2372 wrote to memory of 3952	2372	msedge.exe	91
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90
PID 2372 wrote to memory of 2356	2372	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.glasscubes.com
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbbda246f8,0x7ffbbda24708,0x7ffbbda24718
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2524 /prefetch:8
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2544 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3984 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6028 /prefetch:1
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5992 /prefetch:1
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1912,1426417667766576600,4198169111030714343,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4688 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:560

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5016

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1264

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
3e71d66ce903fcba6050e4b99b624fa7

SHA1
139d274762405b422eab698da8cc85f405922de5

SHA256
53b34e24e3fbb6a7f473192fc4dec2ae668974494f5636f0359b6ca27d7c65e3

SHA512
17e2f1400000dd6c54c8dc067b31bcb0a3111e44a9d2c5c779f484a51ada92d88f5b6e6847270faae8ff881117b7ceaaf8dfe9df427cbb8d9449ceacd0480388

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
201KB

MD5
c445ab4315d0633d446998c80764cc36

SHA1
47d3dee9845cc6e29b6771dd6560793b8b93000e

SHA256
5635695eeb70b51c449aea7a5bd3c9699c3c28c64498fb7fcb8173aad45d7242

SHA512
83a32ffdddf3ee56e89f232c8d05a4b00265895b0e41d13700f90fa389f0bf3f112c291c24c3819751803322b11e2ff866971d835d601672b36818c4e099bff1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
480B

MD5
e99fd82ad24e9d9eaf2882f110bbdf9b

SHA1
9787d37a4162fe41c146ef1ce6ff51854c8e0d7a

SHA256
ecf3fc9aaa5a73dc787db7b623099f815d9875b946131bc435347112ca499975

SHA512
63b18afd0d47637a63cc113dd1066ca9ea80a37b55aebe8e984d47a2ec842d3b050739bd716dae59fbe6dbbec5aeb613137d61974603c4d153f3c39392c3c5d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
358c447f83d4f03990b130e9f4a92c53

SHA1
2fd68d6384d52eac81879725497f9fb917e37585

SHA256
e8c54518dbd5b8e65bea8fe00a0c485dec43d5d17c79811b144800ebcb513552

SHA512
1be68979a74c361ac728bef572787b92c1ded438921fc918b0a1f974f88e1c91376ddf87a0bf6bc593dad43d53b57e62a33eabc6f287e570066bbc4ea3be1fe2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
f8287a44ce9a28829d9bdb57e834ba20

SHA1
c2c6501a114de840614689347c5aa563a4ffe16c

SHA256
86024a14245a1017522e711bc82d6b779b872694e3b05221e76cda112dc327ee

SHA512
94f7f05338ab1b3f21b8146c2b0fcb2f2c70a57d8a5661842bd3af08a9534557359dd45b56092476f04c5dd13f632c15c9bf109b9abcb42643eda8fe99d8b142

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
ea9d782d50235fb950037de7018a237c

SHA1
756d0fa49476512ffa4ee924da9ef8821098b5fc

SHA256
45533e3699b91e898373099a831c7997bc26555ca4983f5214e4fcc81d5f5aa3

SHA512
e77effc5a96514d31577765d27b60c0d5822e016c69ebcea8b3b444fa9cc52112b9f8227396013a57cbe02eff32d28448d40e80df28578599d95d4b469863b5d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
1b1b142e24215f033793d1311e24f6e6

SHA1
74e23cffbf03f3f0c430e6f4481e740c55a48587

SHA256
3dca3ec65d1f4109c6b66a1a47b2477afaf8d15306a523f297283da0eccbe8b1

SHA512
a569385710e3a0dc0d6366476c457927a847a2b2298c839e423c485f7dcce2468a58d20133f6dc81913056fb579957e67f63cf1e20b910d61816210447cd1f1f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
588f55f9b1160bc535bec045ee130bc9

SHA1
33bb6e3ff24a569ba11bfaa57569c15fdb740dbe

SHA256
519158cb1704dc6d6d18b023c7ee9a2c20be147286e5c68d2a47db2f0861d3ae

SHA512
eb332fcc830853d1f4de7c6f74b0fa72fc7d9143bb9537516f6bb75e0c2cb99779fca02eceafb42e92ad0940390aede0a36de6c583439e87dabd2a9ad1259baf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580de6.TMP

Filesize
1KB

MD5
14e06b5206e253ff1238e2c52467551b

SHA1
10a83af604c24c6f7880ef49a225e379e7a8638d

SHA256
794fa840fae80a8d10f44008b686bdf1a15533f88ab91e68ecedd88043c29869

SHA512
6741c36afd47a1a2ee8733f5db9cad4f9cde9c1b5ddfda3d49ef62064a950e7614bba67270e4752ad16bb83ad7ef845ea2dad1b7cf9877ba3a68cd3e2e362304

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
fb2e9289b845f3c884a12327ff68e3fc

SHA1
a90d694153742510fb463fdc936798f516569610

SHA256
ba2014c3cf183b83434af0610fb622e334ba0745b5829c7aec139b1813e08a73

SHA512
21654ca0948da43a08ca0088732698960e70b422fe0e13920322d1bd4d075df822d4e499935913cad6bf9b37754bb46d6377323dcfc20b307733553e93552ef1

Download Submit