hxxp://internexa[.]com

Analysis

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
30-09-2024 17:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://internexa.com

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3844	msedge.exe
3844	msedge.exe
232	msedge.exe
232	msedge.exe
3880	identity_helper.exe
3880	identity_helper.exe
1336	msedge.exe
1336	msedge.exe
1336	msedge.exe
1336	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 232 wrote to memory of 4508	232	msedge.exe	82
PID 232 wrote to memory of 4508	232	msedge.exe	82
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 4480	232	msedge.exe	83
PID 232 wrote to memory of 3844	232	msedge.exe	84
PID 232 wrote to memory of 3844	232	msedge.exe	84
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85
PID 232 wrote to memory of 436	232	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://internexa.com
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff85f8b46f8,0x7ff85f8b4708,0x7ff85f8b4718
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4712 /prefetch:8
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4712 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3908 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,16883342091913225566,13695902314237033160,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2668 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1336

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3700

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4888

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

Filesize
720B

MD5
3e285be325a4fe4c103ba813df7433f6

SHA1
42f3bd77eb84b0b95eea1493039132151c8dabf5

SHA256
b4da85f18fc4235b2c8b0241b4d2e0281c8955248e18430a3f8af3fd1ebc92ac

SHA512
f876901c36d2864a8fe1c931584a7df0b62d22247c957b84165f12ddc22d84143ebfa2100e54c6d5bcbcc42ee45950e7bf43bce75352393c0e27b9c35e49b6a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
552B

MD5
8f52fc0c16ff1b74c32e6e6ab6a05ce0

SHA1
0975ce1e8e3c54f62277f7662cfc8d8e5a2db9e9

SHA256
eeadbbdbaa141d10472d79163db91fdc5d9f926da6ac75c976cc9227c096ee45

SHA512
2d6b6d9908f07d4827cf6bf70eaec5d5c50ebe9e78c437a2af4ea812076b308b55858f369589f02ecb4d26a0744e3134eff86fa82910133774dfc9dfaf61bbe4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
95e99be5d828259a4e558376658ec66c

SHA1
4da09a234f8581abcc39cfcb11f0f667f5ffbcad

SHA256
4e3821d99fc6c288b0444942e64ee6802c5d66903b986480991217042d4f7231

SHA512
6e39ed14d3a27524b9f4894d75226bb423c01d86ef1506376b9d50fb154894ca24e8c7f982ef14c22ad33bd362596bbc3bdc677bcbb6aba9c868400ddf860caf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
5c562f7d4db66843f935cd0af1b45ebc

SHA1
bdd61a5009b5fb65d17f2ed392555fe852c5272d

SHA256
c6c1eb122ec99b7a34365719ace09c4f86c2d352bfde806fd483a83ebe622d95

SHA512
6073b331d3c9c96b2b175f959e552392e2387ddc95eeb13ee7dbf9ca9ab12b53725f70a04f1913406e12991905c93b8dbf4a83069ee1615b3733ddb430c6465b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
c5a292c0dafd388b1f2dceaf727dc05c

SHA1
7b338c268d5ec1d303e8c68222ca8dd9db298081

SHA256
efdd9089d9509b9d5e2e9dec58e5d7273676aa715b67d0e161febb6a54c293e1

SHA512
199818fbbf61a240cf0d01206fbd7750524d87c219c81afe9fadbe6139e0f702fd8cc44c6c55365cf947a0c264db57a147de75fb781ced787b60ce88e60340c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
c9c17db1d4dc32b5726d1e603cc1b703

SHA1
aaf3b38eff9dad472bf9a90af14c9e0858c5a9c9

SHA256
dc5a62fa4a673d7fd792605cda6152e4dce0de95093d4accf653667058f4eccb

SHA512
7b4ab497fa988d2816188e19c39d8bee189e013cdc8212290f8a5fe4e9c0a7c6513cf07317e276e7c1edb8a17162286470103068d16fb2ea62d8d2607313dce9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58877b.TMP

Filesize
2KB

MD5
5184b6827ceda6279ff8df7baeb7a8f0

SHA1
745f754e4f24be0c3deda75ee41e053b00228fe3

SHA256
d66d3afc3d82152d0c6427c0c891425914829b77d47614e0a55b6f85d6b7315d

SHA512
54f7e3a3f00d846e1e0541f097d95c51f97df8fb37abf84c915e15d3583af4a0d3f0fe8ab3d6d78a066176eb9ccf3bbe54bf0ff65e7a85b05b8c6e1b8a5de410

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
bf32736d872c621d490a08b36747ebd0

SHA1
7e0910d041c3dc774bfbc460dc96a1a8d654fedc

SHA256
3266f00c3c98bf87b41f64cfe6c7c51eaeec671313ec7a84dc305026a811fb89

SHA512
f0ed0f1331207e5139a8a8f57fac4e829f54060a0b09b93e1dff49cd7c1f8c86ee96f33389ba18f5ae8c8b46a4cef5232d68c96ddc1646570530de8dbe2d2842

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
a2e9dee83ea1485e60dfbdab96ae7e0e

SHA1
78f2b210a029a88ea772a6fd1cb950423a69f3cf

SHA256
75ba733ab23d0730fed7199a982e1757e8a0f20f205c7f6bb22d1b1c90faa9e4

SHA512
0efe09342c460b6c872f0b8c6ef3707fec43707e9251545ea1d857008d8763b95c00c6eca383407e5d8fb42c6f27de06f5f384eba66d3faf34a9a7aff13fa356

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
f77f9f8929a70c70f8c20febf473fc1e

SHA1
056b847629db7c26d96ae7f58984473108b4945c

SHA256
363ce3076c06a088754164e65192ff0cd60746f661af0c3b5353657dacf15dad

SHA512
614015a255680905b8b64152e5eafb0b40c9a002f7645d920ab93911ef7f4f43f17732e55e8b952dbb13538c84225bd174ce096c733bb0418a247bb1212f75c6

Download Submit