hxxp://msig[.]dodeveloper[.]com/articles[.]html

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
24/07/2024, 00:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

http://msig.dodeveloper.com/articles.html

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1160	msedge.exe
1160	msedge.exe
4288	msedge.exe
4288	msedge.exe
4508	identity_helper.exe
4508	identity_helper.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe

Suspicious use of FindShellTrayWindow 27 IoCs

pid	Process
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe

Suspicious use of SendNotifyMessage 26 IoCs

pid	Process
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4288 wrote to memory of 2872	4288	msedge.exe	86
PID 4288 wrote to memory of 2872	4288	msedge.exe	86
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1068	4288	msedge.exe	87
PID 4288 wrote to memory of 1160	4288	msedge.exe	88
PID 4288 wrote to memory of 1160	4288	msedge.exe	88
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89
PID 4288 wrote to memory of 1884	4288	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://msig.dodeveloper.com/articles.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffafb2746f8,0x7ffafb274708,0x7ffafb274718
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,7905984671102189211,15935909196737350929,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,7905984671102189211,15935909196737350929,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,7905984671102189211,15935909196737350929,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,7905984671102189211,15935909196737350929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,7905984671102189211,15935909196737350929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,7905984671102189211,15935909196737350929,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,7905984671102189211,15935909196737350929,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,7905984671102189211,15935909196737350929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,7905984671102189211,15935909196737350929,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,7905984671102189211,15935909196737350929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,7905984671102189211,15935909196737350929,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4000 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,7905984671102189211,15935909196737350929,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4896 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2088

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4540

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2640

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
04b60a51907d399f3685e03094b603cb

SHA1
228d18888782f4e66ca207c1a073560e0a4cc6e7

SHA256
87a9d9f1bd99313295b2ce703580b9d37c3a68b9b33026fdda4c2530f562e6a3

SHA512
2a8e3da94eaf0a6c4a2f29da6fec2796ba6a13cad6425bb650349a60eb3204643fc2fd1ab425f0251610cb9cce65e7dba459388b4e00c12ba3434a1798855c91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9622e603d436ca747f3a4407a6ca952e

SHA1
297d9aed5337a8a7290ea436b61458c372b1d497

SHA256
ace0e47e358fba0831b508cd23949a503ae0e6a5c857859e720d1b6479ff2261

SHA512
f774c5c44f0fcdfb45847626f6808076dccabfbcb8a37d00329ec792e2901dc59636ef15c95d84d0080272571542d43b473ce11c2209ac251bee13bd611b200a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
058f304278efd8ad6d1124b057acdee2

SHA1
11a26206364c4094645d271924841c8307ee57d8

SHA256
94e14bee70d0b7617347f529330e9ec35162495e8e8d53e50940c8a85a834729

SHA512
22befe1918815acc87ce4efd07d574788155ecabe3625cec13fcc1ded7a055a74d7f0b4fe54df03e9aec1566be05ded788c42a15429bcedeb08c7cec35c2cf6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
a70f784f76a1f628b443c4c145d10743

SHA1
daf8c3db03f1ae630f4bba834fc5a8b60de97274

SHA256
845f0494aa2d9c9101ca65c306f5ef75ba38ffb6d8ef4a8e0a735c14e1735b37

SHA512
24362c6fa2670230d340ca9818afb215ad3367c931f11f72055a6b52db966b5812d71bdc17cf8debae712fc3804562bf68f5aba2d6d602030a6c04987ee8efcb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
698B

MD5
f450d6cf608b6614853bebaeab814d29

SHA1
b91393586cf9b512e384de21d60cc5812d9b0ab7

SHA256
a898b849dd31bcdf0d3a0a48b11e3a1bd44c835f4d45c1971975c656f5be0475

SHA512
5abe51261e303923c05b0e71ea78709c66fdd801ee23ee783cc688fcb93f14b4de7e8c4b1cc0cb00e8cf754343f324d6ce66912d1c93749a4e5618ebb3eead63

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
698B

MD5
a54091f0fd6e71ea40512b9a50b571cd

SHA1
8ee05282797d03a5017a7f10815946da05b3f67d

SHA256
80fa7bf29211408f29de2d94f7e83319d48c758829598a83a576c6b327e0d33e

SHA512
5d3c45fa76178fe75d79ca80e01a0e1fc5b0d711fca9b61c399c5351e8c184efe294e9ae8a2b813aa8556545fdd76e3ffe22c4542f414f916efd9b89af23b3c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c8da262c29cfabff78ea387747c461cf

SHA1
914ef4a756386d7606cbc297575ccbe8df77dfb3

SHA256
83396593ea1f87271dfd4399e9b840ac71df0e04d1ede2b95adda125a3ecbedc

SHA512
fdb779fea50c2433dc0a09f812044579778d60bc5d2212e171acc3c71083228c40933e83306fc8f730bd70b3610643d7fe82b3e4628e8cc410ea108870116075

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
26e27981f4bda4fb57d48dd04323b932

SHA1
e8159fce161566db2172cc465999a68212d7cf67

SHA256
bcd00734c7d4c3369298f7778ab97f00724727e0f192a36d31b5a1ee4bdf7eab

SHA512
d9630bd0fbd0c140445a27a45cf81dcff4404ac72e61b2928d0ec4d00321046c2a9bf1f1cbc9038a62887b4cb8226d9c4feb98c2b7a87abbe440b34312beb1f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
85c90ecedf08fe9f26d7dbb46ec93f75

SHA1
2320ceef9c7ee48fbd77d7e61b2415ac3424ed62

SHA256
201ce5f33383a10d49e4d20af61ac3c729002953c594b5d1247e55cfba90c9a5

SHA512
3d94cf6358d1923620da0a28281840ae9f16a4a5ac291c94118a6a4cb98dc22bd270f76121e9e6bf4fcbd0ae77af6e31970a92269fe6aa1c5818eee7d9fcb342

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f646d42c6a043f0e42bd8528ac8984f4

SHA1
282cddfdba7e80ed230c5496b3a1935824a063ea

SHA256
68fdb34a728b0d9ce80327a857427fd22856b6858409b9d42317bf788d548f81

SHA512
8e898231730a2f3e25985552f261177b184ac198f4f5dc24a0ced961ac79c601145e2f27460cac544ddc3d8fa0e834584d67809df2d3ab92ab8564647f553115

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
b8dfca3e4ce8ec2536dcd16b09a59309

SHA1
d2f3403f3df73bc415cf11fc8bb781f1154a71ac

SHA256
0b88378448f0da54d041f7b5355e5759d1140c245e5ac7921f56c6e2a3cfac80

SHA512
d335fa108c8a7800a22b365633cb155b2e04d35812fcad610ffebad3117a38cd28373aaf1540224141318d107de33b19c611a885c2e3e2300b41647367f21f6c

Download Submit