hxxps://appsource[.]microsoft[.]com/en-us/marketplace/partner-dir/4e902d25-237b-480e-8eeb-480dfbc7eab8/overview

Analysis

max time kernel
18s
max time network
20s
platform
windows10-2004_x64
resource
win10v2004-20241007-es
resource tags

arch:x64arch:x86image:win10v2004-20241007-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
27-11-2024 10:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://appsource.microsoft.com/en-us/marketplace/partner-dir/4e902d25-237b-480e-8eeb-480dfbc7eab8/overview

Score

5^/10

microsoft discovery phishing

Malware Config

Signatures

Detected potential entity reuse from brand MICROSOFT.
phishing microsoft
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4520	msedge.exe
4520	msedge.exe
4004	msedge.exe
4004	msedge.exe
2440	identity_helper.exe
2440	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4004 wrote to memory of 4776	4004	msedge.exe	83
PID 4004 wrote to memory of 4776	4004	msedge.exe	83
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4928	4004	msedge.exe	85
PID 4004 wrote to memory of 4520	4004	msedge.exe	86
PID 4004 wrote to memory of 4520	4004	msedge.exe	86
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87
PID 4004 wrote to memory of 4144	4004	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://appsource.microsoft.com/en-us/marketplace/partner-dir/4e902d25-237b-480e-8eeb-480dfbc7eab8/overview
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe237c46f8,0x7ffe237c4708,0x7ffe237c4718
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,15332512066270078118,4678896771487568927,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,15332512066270078118,4678896771487568927,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=2116 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2060,15332512066270078118,4678896771487568927,131072 --lang=es --service-sandbox-type=utility --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15332512066270078118,4678896771487568927,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15332512066270078118,4678896771487568927,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15332512066270078118,4678896771487568927,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15332512066270078118,4678896771487568927,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4920 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,15332512066270078118,4678896771487568927,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,15332512066270078118,4678896771487568927,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15332512066270078118,4678896771487568927,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15332512066270078118,4678896771487568927,131072 --lang=es --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15332512066270078118,4678896771487568927,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4080 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15332512066270078118,4678896771487568927,131072 --lang=es --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:692

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:728

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4484

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7cb450b1315c63b1d5d89d98ba22da5

SHA1
694005cd9e1a4c54e0b83d0598a8a0c089df1556

SHA256
38355fd694faf1223518e40bac1996bdceaf44191214b0a23c4334d5fb07d031

SHA512
df04d4f4b77bae447a940b28aeac345b21b299d8d26e28ecbb3c1c9e9a0e07c551e412d545c7dbb147a92c12bad7ae49ac35af021c34b88e2c6c5f7a0b65f6a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
37f660dd4b6ddf23bc37f5c823d1c33a

SHA1
1c35538aa307a3e09d15519df6ace99674ae428b

SHA256
4e2510a1d5a50a94fe4ce0f74932ab780758a8cbdc6d176a9ce8ab92309f26f8

SHA512
807b8b8dc9109b6f78fc63655450bf12b9a006ff63e8f29ade8899d45fdf4a6c068c5c46a3efbc4232b9e1e35d6494f00ded5cdb3e235c8a25023bfbd823992d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
480B

MD5
4a50cdcf21c737a06abfbf4c6c9e251b

SHA1
733fe367a0f58f5a31be23a5270a56d2cd568499

SHA256
0e9ab5b7570efeb500c2d85ac97f448b650229c02b837fec171cc5e51020490b

SHA512
908798413eb4d4213b0406f559c6f0c495342d9e9bda2563db81a7b485e2b068e031805d5ee7bfed058423e98da3266994bddd0b92ad691b3b86cb76a9a0cb2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
941B

MD5
6ce5f1dd6f1489b79164ef86b837b97b

SHA1
74c47873614de385de0b0b6d9b539b008a8dced9

SHA256
524ccaaa53903cac271abed1eb7ab63be4886958c55bec78bb6088569f7ed856

SHA512
08b8c752ac0a5b0404ed5b00c88889b37a6c136ee4c307ca464106c270fcc1ae6e343ac8256f831104442e2538eaf6fe577d9226dc7348259fa85083b1694316

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
f456b68a2cd2b9e0b1e81c5d8514fe87

SHA1
6377099f0fa88717680a9196f8c7dda094ee2843

SHA256
c6050e6771cd679b893518fd8815bdf3e513278bb19712e44b95fbda03f038c6

SHA512
fc70d12634823c785622acf0488e697a6e77b34f84cdc26c1573f969cf7e2c5402901e8a7f6cc0b1949b914072a9cfdd66ae88e7526842fb2f1f2f88b519c63e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3e401dcfd5dabe8ea8f75e11082d55a1

SHA1
f1cda771b709082134d24b6a7d3514a8ed03f46b

SHA256
7a197421965b2e4f398f4a69b9223ce50432adcc7d4185573570315dbf528325

SHA512
d736be1b06389045d01dd12823a4b698fdc0522d320ecbe23922eb7b25cbc42d7aa5d82131f3d64ae8594589fa77d152e695e64ca4bb64faecffb8ca13fad82f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4ce194f9fa7702df246cb4915767bf70

SHA1
f7f7e5d8aa792e1007462830cf165c8d8bdac5c6

SHA256
58dd8464eea72e8f074a73d65da2117f74d8ae079cced46fc5c1f50e1ad03454

SHA512
a45480344ef9e5e9f0339cc5f424c841b689bf7811f74bb845f1ee244f10424049dea29c5692b8bb561d999c6018f65ceadf66300a69e8b3c3f4f0382eefabf9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
0a3b177dff11a48fb7582eab0264c52a

SHA1
4fcbbbc5775cef0014019a260482534e632660ef

SHA256
55f0998be2319ecb6e58bb5e684de9bbf01d2b0d968196b2ca186ed7108adf3b

SHA512
bd70c28c2a73cc60dcc0465151f29be19de4fa6c71596c11cecb527b82732672eb55569e0b11938aa9c7eb087f178749009f3c5e596c79e19278614161acd195

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58025c.TMP

Filesize
1KB

MD5
9344b2298b4c0ed02c7be628381ccd16

SHA1
0b06b05b6d7eab386794246200b8eed8564da46c

SHA256
4637787e22c6427d81a4c9b3da4f72132e0b9808a05e3ce1c13c76d0febf849f

SHA512
8846b9a2fc8817a76a695c78343f9f86dc1b792c0b9a340e02351a2a34e654724248fa4150906cb5474678a177919cfb59a8fd5acd080304b0044bd99c82061b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
7fe40ce59ee45c522d47a0f1bde2899c

SHA1
add28844ecb40b2d4f75abe6f72ff411f60ba553

SHA256
0a3849c4fec11f362e53a9d172e5df8a6aa6bf91e43b03eb741ada7a789922b6

SHA512
056d714a7f6508fb1e0e875448347652d5faa79d0199772a5b287f0781181a756864588ebb13ecc8f0b9921c4b8b060f2a5a9126cd0c1893d1ec415ed5f3da7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
5d38e2e5898aaf5c41736d6b79ba5256

SHA1
13dc56021bb4120a095aa9323760d533f51935d1

SHA256
9d534b0860079b7093c342bf93cf54bf313a91c2df87af0db234e55cd9402ef3

SHA512
7973fdcc587fc79496f740b542d440c048b06c6b3b77b8466cdbe081d2e75aae40ace25f98892cb2e06302396f56db73873e0990d2d4627bc127e11ff5ad68b4

Download Submit