hxxps://download2339[.]mediafire[.]com/s7wz84q67jagLz1e-SoTTsvxb-whPzStMkiFdvMm-vbPetC59GD6ICf1x9TDdReEM-cvpMMdVdK8NJPm8Jrv0A1SIeKtdr2SQp_hRQTw2axEFvAncHVLw8-8bbor6oi0Uhuu1PuxluVPcNgK-ITWjDHyOVzOFWGvI-1etXiu9gO7cFc/jmxcdbcpk7ml8ts/RB_scri%27%2B%27pt_install_x64_x32bit[.]7z

max time kernel
1681s
max time network
1686s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
06/08/2024, 18:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://download2339.mediafire.com/s7wz84q67jagLz1e-SoTTsvxb-whPzStMkiFdvMm-vbPetC59GD6ICf1x9TDdReEM-cvpMMdVdK8NJPm8Jrv0A1SIeKtdr2SQp_hRQTw2axEFvAncHVLw8-8bbor6oi0Uhuu1PuxluVPcNgK-ITWjDHyOVzOFWGvI-1etXiu9gO7cFc/jmxcdbcpk7ml8ts/RB_scri%27%2B%27pt_install_x64_x32bit.7z

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
4644	msedge.exe
4644	msedge.exe
2432	msedge.exe
2432	msedge.exe
4572	msedge.exe
4572	msedge.exe
2528	identity_helper.exe
2528	identity_helper.exe
2020	msedge.exe
2020	msedge.exe
2020	msedge.exe
2020	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe
2432	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2432 wrote to memory of 484	2432	msedge.exe	81
PID 2432 wrote to memory of 484	2432	msedge.exe	81
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4676	2432	msedge.exe	82
PID 2432 wrote to memory of 4644	2432	msedge.exe	83
PID 2432 wrote to memory of 4644	2432	msedge.exe	83
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84
PID 2432 wrote to memory of 4860	2432	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://download2339.mediafire.com/s7wz84q67jagLz1e-SoTTsvxb-whPzStMkiFdvMm-vbPetC59GD6ICf1x9TDdReEM-cvpMMdVdK8NJPm8Jrv0A1SIeKtdr2SQp_hRQTw2axEFvAncHVLw8-8bbor6oi0Uhuu1PuxluVPcNgK-ITWjDHyOVzOFWGvI-1etXiu9gO7cFc/jmxcdbcpk7ml8ts/RB_scri%27%2B%27pt_install_x64_x32bit.7z
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffc369a3cb8,0x7ffc369a3cc8,0x7ffc369a3cd8
  2⤵
  PID:484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1964,6559748788145098378,10624879621456202973,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1976 /prefetch:2
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1964,6559748788145098378,10624879621456202973,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1964,6559748788145098378,10624879621456202973,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2812 /prefetch:8
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,6559748788145098378,10624879621456202973,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,6559748788145098378,10624879621456202973,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,6559748788145098378,10624879621456202973,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,6559748788145098378,10624879621456202973,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,6559748788145098378,10624879621456202973,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,6559748788145098378,10624879621456202973,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1964,6559748788145098378,10624879621456202973,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1964,6559748788145098378,10624879621456202973,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1964,6559748788145098378,10624879621456202973,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5420 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2020

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2108

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:404

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
026e0c65239e15ba609a874aeac2dc33

SHA1
a75e1622bc647ab73ab3bb2809872c2730dcf2df

SHA256
593f20dfb73d2b81a17bfcc1f246848080dfc96898a1a62c5ddca62105ed1292

SHA512
9fb7644c87bdd3430700f42137154069badbf2b7a67e5ac6c364382bca8cba95136d460f49279b346703d4b4fd81087e884822a01a2a38901568a3c3e3387569

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
228fefc98d7fb5b4e27c6abab1de7207

SHA1
ada493791316e154a906ec2c83c412adf3a7061a

SHA256
448d09169319374935a249b1fc76bcf2430b4e1436611f3c2f3331b6eafe55a2

SHA512
fa74f1cc5da8db978a7a5b8c9ebff3cd433660db7e91ce03c44a1d543dd667a51659ba79270d3d783d52b9e45d76d0f9467458df1482ded72ea79c873b2a5e56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
81bc2dfdac330647aede6338de8da663

SHA1
a379997ed2ffc1df1e82fe75bf8acc70d36fd634

SHA256
b2658db14de278f042cf888bc34936ea01ee02689860d8e83cbbb97002642e5b

SHA512
50fe3d255dcee359b76bfdb9eeb69d132498cab8288bad007224728a26fd81065689f615231d0f5e119e33d7b0db61f2665a06ebb496d7e5e2fd4cca30fc5b3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
5KB

MD5
a61cebb23fe67068ffe63d69a8554fc5

SHA1
6f770943a3d9b36f03943a16bfd6a1c7d7cd6035

SHA256
215b7e63aabcf33f633bc51530456660e7b97d726c2b1d0afaa4b0c0ddc1c935

SHA512
b93bece1a02ef8fed973e977d6bfed52db3f8d876452ca5d35d568a8febe4e48fbd79abbc9bcd01aa9e70bdb21f258a5f903a120ccb10c0c98f6254c0945bf7a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
f524f7a324a6a94cb32ac4d6933e96a7

SHA1
b3e06ab5d9abfeaa58307d30029d139f4acf794f

SHA256
25e24b2ffc55a3718e07c5a658291260367d3d0ced0de1a1f78ef1f7aeed0c62

SHA512
4e0b1eaa88d1c185a1e35ffd5f9dab3d82fc5891ea9b08cb505bfcba6fbf406e09464c8a70fb98b1bee5a501a4063f83968c6e25f8521536331b9b499faa5400

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c4cd0c51ab13a45c226123353aa36b53

SHA1
0362c30d7bf6e25e954ee3bf5fa2412f49e66a50

SHA256
95ebf5d6f5fe0e51cde145dd04095adf590fff27dd8c619eed1b46f30254c201

SHA512
ffb369cb965e41f613ee271f69367d42bc8586277fb4f76d609a846f82d011d788e5a93fddc50bd2db45016b9fe98ed7d061487b3ff08b6af5c844328728dd59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
bc9541915ac27a9e9bac06497c683f34

SHA1
e7af74f5ed2860cf69f4a158ddbbf3b357635d64

SHA256
9840853b009754c0fe40dfc5ff8e2d48132839321e2f2ae40de559fde6b0df10

SHA512
6d97e9ec430a1c112e08e52ba3388c24803f3641971879b4ad0e07a3a6a3b5861eea6f406a8834d660e3b193e81ec06b9afd90d0cfdee1091012380db847b370

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
28f7a372e662e561e149e3659a947fe7

SHA1
b8d135308a37a7b33d534f24061f7dc76ede7ebc

SHA256
2b9614830ff7a0702330b93032d57e0f585a3819742b2a411a3a06e44ca550a7

SHA512
7503671d5eb459ee631700bea84aea076c20fed3aeba4b3b232339d61df32dff4f4ef84525522d55cc9959ea81ddb4a6782e426066193a4dc89b014cbc38cb1d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
3689f2c37166db7ad57b0f5fb3a66c7e

SHA1
d05cab8e19a9bfbf4c63c3f62f1e15a142f74223

SHA256
7c6a8909bc2e0e158ce26970d20178fa8bc061622570bb314f979ee7c63141c4

SHA512
c08e56d33ea1d945684bb94ee81d6822c23938d4ac43e4a98c2f79df91c0060e899ff6269025a3ef98ad0b233c29ae5abd59c3c642097d0686afc22239f84dbf

Download Submit