hxxps://steamcommunijty[.]com/gift/7656685934763596

Analysis

max time kernel
63s
max time network
68s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
20-02-2024 18:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://steamcommunijty.com/gift/7656685934763596

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

Processes:

msedge.exemsedge.exeidentity_helper.exe

pid process

3332 msedge.exe
3332 msedge.exe
2788 msedge.exe
2788 msedge.exe
4032 identity_helper.exe
4032 identity_helper.exe
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

Processes:

msedge.exe

pid process

2788 msedge.exe
2788 msedge.exe
2788 msedge.exe
2788 msedge.exe
2788 msedge.exe
2788 msedge.exe

pid	process
3332	msedge.exe
3332	msedge.exe
2788	msedge.exe
2788	msedge.exe
4032	identity_helper.exe
4032	identity_helper.exe

Suspicious use of FindShellTrayWindow 28 IoCs

Processes:

msedge.exe

pid	process
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 2788 wrote to memory of 964	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 964	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3888	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3332	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 3332	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe
PID 2788 wrote to memory of 4152	2788	msedge.exe	msedge.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://steamcommunijty.com/gift/7656685934763596
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2788

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x104,0x108,0x10c,0xdc,0x110,0x7ff997c446f8,0x7ff997c44708,0x7ff997c44718
2⤵
PID:964

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2176,7964731531964711035,7621123644910998897,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:3332

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,7964731531964711035,7621123644910998897,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2260 /prefetch:2
2⤵
PID:3888

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2176,7964731531964711035,7621123644910998897,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2656 /prefetch:8
2⤵
PID:4152

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,7964731531964711035,7621123644910998897,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3468 /prefetch:1
2⤵
PID:4948

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,7964731531964711035,7621123644910998897,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3464 /prefetch:1
2⤵
PID:4216

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,7964731531964711035,7621123644910998897,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5612 /prefetch:8
2⤵
PID:4128

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,7964731531964711035,7621123644910998897,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5612 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4032

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,7964731531964711035,7621123644910998897,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
2⤵
PID:3052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,7964731531964711035,7621123644910998897,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1
2⤵
PID:2200

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,7964731531964711035,7621123644910998897,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
2⤵
PID:4240

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,7964731531964711035,7621123644910998897,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1
2⤵
PID:2616

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4296

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4736

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
Filesize
330B

MD5
85fddfbb65d15ed63f2664436d35ad59

SHA1
50bf40c757549e5d57593943849b6a41188184fc

SHA256
73a155570af3f2d35061768601ff4a68c557dccad5800c00d97ea1e9fadfcd7e

SHA512
099c3962f2ea8520e1c01f1f03b4f0e8cfa08771190d3c8ecf5fa26feeb8df83a3016c3758b72082cd09767852910888645638ca2d24680b4b4c355b88bba8d4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
Filesize
330B

MD5
03e1dd1690a77ae5e2a88b54d49ee2dd

SHA1
129d2190efe8824d45bd3d4c0f4c15c30f954b50

SHA256
b5e08c535019620f26d1ef811e20525ed4f5cbbfef8e7e842bbc005c74a944ce

SHA512
7318bd1282836a24b135c131e87718fc8735f1f75547c81c10318d612b6a1bb9c16cf9fe865778b150b05b193d03aab64aab83d1958052f28b6a0b1d4110d4d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
d5564ccbd62bac229941d2812fc4bfba

SHA1
0483f8496225a0f2ca0d2151fab40e8f4f61ab6d

SHA256
d259ff04090cbde3b87a54554d6e2b8a33ba81e9483acbbe3e6bad15cbde4921

SHA512
300cda7933e8af577bdc1b20e6d4279d1e418cdb0571c928b1568bfea3c231ba632ccb67313ae73ddeae5586d85db95caffaedd23e973d437f8496a8c5a15025

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
456B

MD5
25c8dc7e60173a8d7353bc09e0ffbbdc

SHA1
af078bd55ff67bdc27a4e456ca311a462f961cb0

SHA256
f2f1755b7ce7d7c22db634b819c11d4a6e3fbfd66049d75788e794dba8594ea3

SHA512
815c432350c7c5c3908026e029b1ca30ccf74d4a7c946e299992e09ec8aabbf00ebc030b5de6973e53dac8c84f78659dbda466bd8da7646d44fb187e0fcea029

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
5KB

MD5
a8fd9f31d4f8cf1f4735b70768e6c5e4

SHA1
adbcf2f189475d5e5dea9b3e0d8427daf2145f00

SHA256
ac026e3724e0afa617eef9e4f8934176f795d609461f3ff64545b8373dc74fac

SHA512
525fffdd029ad285dc2ffde035c628ceb2a2e12ea1b8a431bcd6f826f182f2834126ddb5e457440b4428e3738bac6be89df6269d82e034e7c5ee1226ca8aba1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
5KB

MD5
ffbab051041c0f39dbfbcf378c2d681a

SHA1
d52ce65ff8d98b12ad17195ee35dfcda041f212c

SHA256
4d6602c628e3e17e307f43a1f9704c77570a15a539bd367993341e30a15e3198

SHA512
841125aa58ac21a6c6275fc3675e30c08bcf72445220d552c87b90a41b6afac32f1a0e2c8abfd933caad5e958f8da1f171c2bde88310811166026ac5d0fd6548

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
29efccaeea2d38e264d4c9141a8b0383

SHA1
84596e8dd5b10941029c5834f6df1f4be307ef9d

SHA256
752c938bc292643d1caffcfeb1262782868be1ca7baea98884c2a896a8e5db75

SHA512
38be52cc69b718cb200c19008887e05d3a28b6eddee9a07509c5d5fc146332535edfa0e52a599598d14aa0ac7e95ac3d9b6bd560e87acdf8934c93c2c29172a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
ff857b489e567e7395221936be8c89c1

SHA1
f510b4905ef4d9c61100678510a5b76a92236546

SHA256
8b7b809d0dae172de7f9059f30eba31723f0010f2f20c4af81fa5bb98f10ec9f

SHA512
be5dd05076328855011ea092747a6bcabd2792654121deb9d3574e3d89ba9b5e390418b187191098af734bc8d20a0d0bcc68e9bcccad3e0a8b50b15ca5955748

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
fcbba6e6d41dea1d5f311ab659e0f2d4

SHA1
c9b0559ae7945868ecaaf25f417d892d890c4738

SHA256
e78b5e56223c586b63696c6a70b66188eae0d89ed655eb670d6e9efef7312e7a

SHA512
2221408aed1d40fbf41523f8ffee2a5936b6ddda85d3b22272508d4d504f6e9382f6b87ae94dc719bf093db3b4e831a2177f09cb10dac91647b0f293117dcf4f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Filesize
24KB

MD5
1d1c7c7f0b54eb8ba4177f9e91af9dce

SHA1
2b0f0ceb9a374fec8258679c2a039fbce4aff396

SHA256
555c13933eae4e0b0e992713ed8118e2980442f89fbdfb06d3914b607edbbb18

SHA512
4c8930fe2c805c54c0076408aba3fbfb08c24566fba9f6a409b5b1308d39c7b26c96717d43223632f1f71d2e9e68a01b43a60031be8f1ca7a541fe0f56f4d9f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
10KB

MD5
2935384cbbc32a568dedb2106c190044

SHA1
16b785be785c0c677f5653ab46051bb3cc76cc83

SHA256
cd6ee1cab114f32a045729da5d61c966d467aea9093a44001e5bc3221b579a5e

SHA512
f6bd41f2000084b567055763eb8fb732f013ac0831f9c56ae2d4b13d2e79e4dab112aa04960b5d62eefb9dd738647401a912c23dddcc04761e9ec1148f146487

Download Submit