hxxps://www[.]researchgate[.]net/publication/357271038_Can_the_Microwave_Auditory_Effect_Be_Weaponized

Analysis

max time kernel
195s
max time network
205s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22/05/2024, 17:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.researchgate.net/publication/357271038_Can_the_Microwave_Auditory_Effect_Be_Weaponized

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2396	msedge.exe
2396	msedge.exe
1048	msedge.exe
1048	msedge.exe
2548	identity_helper.exe
2548	identity_helper.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1048 wrote to memory of 4128	1048	msedge.exe	82
PID 1048 wrote to memory of 4128	1048	msedge.exe	82
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2280	1048	msedge.exe	83
PID 1048 wrote to memory of 2396	1048	msedge.exe	84
PID 1048 wrote to memory of 2396	1048	msedge.exe	84
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85
PID 1048 wrote to memory of 976	1048	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.researchgate.net/publication/357271038_Can_the_Microwave_Auditory_Effect_Be_Weaponized
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc502e46f8,0x7ffc502e4708,0x7ffc502e4718
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,4753778388558069225,16215756059150161966,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,4753778388558069225,16215756059150161966,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,4753778388558069225,16215756059150161966,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2928 /prefetch:8
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,4753778388558069225,16215756059150161966,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,4753778388558069225,16215756059150161966,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,4753778388558069225,16215756059150161966,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5452 /prefetch:8
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,4753778388558069225,16215756059150161966,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5452 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,4753778388558069225,16215756059150161966,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,4753778388558069225,16215756059150161966,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5740 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,4753778388558069225,16215756059150161966,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,4753778388558069225,16215756059150161966,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,4753778388558069225,16215756059150161966,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2720

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4172

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:772

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
537815e7cc5c694912ac0308147852e4

SHA1
2ccdd9d9dc637db5462fe8119c0df261146c363c

SHA256
b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f

SHA512
63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8b167567021ccb1a9fdf073fa9112ef0

SHA1
3baf293fbfaa7c1e7cdacb5f2975737f4ef69898

SHA256
26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513

SHA512
726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
456B

MD5
7876d39f4a5a1e7bfe28ad2311046d24

SHA1
940fc22edaaab8d55742fe2dcc6329a0f21e92ef

SHA256
ff5b1fbd08e44ddaa6218fd732a63c282b6917396e58872b07ba2ec904b2af82

SHA512
d6fce2c0b7954ca0a0475e4d0e659c68b2e0a769fe27e8237003eed7d43e4d97de20fdb471fadb527cef73596e79ebca61afdacec585effdd38db081539a5bf3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
f5d697e92e2dbbdd03ad84762709fc2d

SHA1
a076e8003336208c221802bd9666d15007e37db3

SHA256
b2cd7ca4bc0ffe4168b1813d9f0de8ddd89eb32bd137a4b53755a2d03cd4fe35

SHA512
2a10ffca6f91d7ce178ac977e7df36d24d58d47faaa34099a8fe353d5b95fe3934ec600da5cd89f014b03ad30a8fc3ee4eaef53709eb5a7fe477ea37a6ffcd8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
18e367a61a893418cc071ac2fa27b6a5

SHA1
be91f9d4af2f9d99e35c9ed8978da6ebfbaafb18

SHA256
e3b1418cbc9bd66dbfa4d47d2053aee0b2c1d58e8c52f68c5adab5c9701b296b

SHA512
0c11dfd4c781c45d3c2b741819457d0849b898ddf6bd1c1700feb9daf8f69cf3fdb0bfe725f1bfbd22d5a208383d4bb925fec47463835a74da9f5f65c985a2dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
30c2de38302d6480e0ee698f267d037f

SHA1
1f2ec449fb850366b467a45bbca457e4363154ed

SHA256
34a39f6ea3cc633e4ac5108b09440a91334adc4d33a4b6290e7b790152951392

SHA512
b358d1cc3ccd45c97802f421f105dd76e04904da7c59760f898a5c410fb31297482630d3cf11dc083849551c2f5d4a5aff9473425eec1f7c6122a3e44f8bac43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c13326e92a39ba971f78104dbe4ef50d

SHA1
7b1e518161200878145a720d923249eba35d9bfe

SHA256
f89eb769d135eb69f3963ace5b507c5aa4700378830ce5c14ff8d263191e66ca

SHA512
b35d2b9ce491dfb6b5126a00393e1f41de4327794f11a150388e16dd240e82a2493dbaae5771106634efb9eaa895181b9b4d4e5689f28e80c6eb0d5e97b72857

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
971034de89ece1b75154a0dc449c5ce0

SHA1
946e13bd15f8204dbd8019be63da94a256c6fa69

SHA256
27f2fd2c6b686273ce0cbd65e27f05b7dd3a4a0da7dba6f6b8b0bbcc4dbbbd25

SHA512
8da6a690b4ea2be8e0a5b57e3d77c700a31c339888e0e433310730b35c04784a70d91efc2c37908e7b4f83be2175bb6f23bd5ac5b86d498762c7a0e85ccf42a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
25b752cc1ff76fe4d05b710837798736

SHA1
c178f1b043c91b71b28446496d3bf93b930e0f49

SHA256
6257f6219730faa5c8dcc2bfb31d0a0c5cce42ecd4abcc337bbff043a3e42926

SHA512
5e1429d2d5c0b2e8633aeb5b37bd7640736fe8fe1f59f0e5ae617c1713390fea2320fc1c225d7037956d684a949c1ae2df7b21ea7f837ee1e92919eb9ab7ada7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe579114.TMP

Filesize
48B

MD5
b0ba28484d5aeb1ba7df2b082dea6e92

SHA1
80491f61399a31f5c5c90b284d60bb2ab661309c

SHA256
3085935b2951cb3a5e7f89b389fb102a9aa7d4a122082847e7a294b3ac5846e4

SHA512
8c91e1d90c58fed20c848ac3c0f40fe98cced9d2eaf39ec3fa4a681fd54b0a5045848304304a67698db2b1dc382e2d3c23e6cd0ddb20f1bace960bd0376f6566

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
04d37c2573f60439e319f1366e477c89

SHA1
270326cb995cae2f38ef3ab4de75ddf5181dcf95

SHA256
df7b187d71c7863bef70484098deaea23bb8fa694f3af3715170e2055b5919b9

SHA512
321db3bbdc4dff5df2bdfc82bce6d8be96720bdfd60a8ac6db8fd131c857965bb5ad570dc10317b4b26634100a6dece84e5db46f55f107fe7261237c5da08c93

Download Submit