hxxps://www[.]maxon[.]net/en/try

Analysis

max time kernel
79s
max time network
81s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
30/09/2024, 01:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

https://www.maxon.net/en/try

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3288	msedge.exe
3288	msedge.exe
4964	msedge.exe
4964	msedge.exe
4888	identity_helper.exe
4888	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4964 wrote to memory of 3132	4964	msedge.exe	84
PID 4964 wrote to memory of 3132	4964	msedge.exe	84
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 5040	4964	msedge.exe	85
PID 4964 wrote to memory of 3288	4964	msedge.exe	86
PID 4964 wrote to memory of 3288	4964	msedge.exe	86
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87
PID 4964 wrote to memory of 3176	4964	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.maxon.net/en/try
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x40,0x108,0x7ff9cc5346f8,0x7ff9cc534708,0x7ff9cc534718
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2656 /prefetch:8
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3740 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6120 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,16060698475404161448,13452306930105602027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:1984

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4064

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3352

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ff63763eedb406987ced076e36ec9acf

SHA1
16365aa97cd1a115412f8ae436d5d4e9be5f7b5d

SHA256
8f460e8b7a67f0c65b7248961a7c71146c9e7a19772b193972b486dbf05b8e4c

SHA512
ce90336169c8b2de249d4faea2519bf7c3df48ae9d77cdf471dd5dbd8e8542d47d9348080a098074aa63c255890850ee3b80ddb8eef8384919fdca3bb9371d9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2783c40400a8912a79cfd383da731086

SHA1
001a131fe399c30973089e18358818090ca81789

SHA256
331fa67da5f67bbb42794c3aeab8f7819f35347460ffb352ccc914e0373a22c5

SHA512
b7c7d3aa966ad39a86aae02479649d74dcbf29d9cb3a7ff8b9b2354ea60704da55f5c0df803fd0a7191170a8e72fdd5eacfa1a739d7a74e390a7b74bdced1685

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

Filesize
213KB

MD5
f942900ff0a10f251d338c612c456948

SHA1
4a283d3c8f3dc491e43c430d97c3489ee7a3d320

SHA256
38b76a54655aff71271a9ad376ac17f20187abd581bf5aced69ccde0fe6e2fd6

SHA512
9b393ce73598ed1997d28ceeddb23491a4d986c337984878ebb0ae06019e30ea77448d375d3d6563c774856d6bc98ee3ca0e0ba88ea5769a451a5e814f6ddb41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
44683b5eb1527a161fbeaa6eb3cd789c

SHA1
f089e835bdf1f397043041b6cbc310a7b8c5da5d

SHA256
34eccba2825b496c86f0d98ff04ff8dfd8a1240804c3a3f6656d8f51130ad9cf

SHA512
a6cda2b4c02f3687704d6b13cc8d45db74c82c00b38bd25bf65f6b8c3f5b78456f267e2e4f43ba14542d2b66878d69ad49f8c5fb4551f8a949a3a7cc5d50e2bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
6c5792b72a475d4ad26122f76bb36d91

SHA1
1ca7cb2ffd33d0263384bd32a54bb74ae817439c

SHA256
08a02cc98b55970c5c56f54e2a17a48c52195e8587c4f75c9194cf02d1ff6f82

SHA512
d600a781047910dbdb1f47dd32346ac005dd2c75d18967b932cb66ed172527ebca77b5100add6ca57bd71594a419eb727e91740d1c13036d1978545ca5def102

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c90b8886038b5d1254554cfe7d474e89

SHA1
8fd4c10ccab18f012ed2ce346d9856d2fbf18128

SHA256
b977d68ef299897f5f9563fd486de91de3fd6344c0b8668f98ecc33067bc8390

SHA512
a23b933defaec9753c314f090ee2c695aac42e3c722e2c4adf5f1cde10ae26d48d7f816ee3abf73769632af6689684c9b4623720d801f3853b332a5d85c02ff7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e7f0b8e65d7db0ba0b01568d286b45ea

SHA1
a73fa9b8d44930dc4e91fd9da15886fa4dc92145

SHA256
d9d9789644ed0133a4402a9656dd2414b70d40f736d8e28d8455753575bfed90

SHA512
1776503546727fb43299c40c87b02fc606971190bd419d76222fc854ce56e4ecc43e223fe0cab98c32d79f00372ca2090f51b4722ba0b3721740c868eb6aea1b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
ca36d6ba7fa9e9b4d1683c8a8af68535

SHA1
3058df6dd96da6e9895e6335746fa5533288b539

SHA256
9e6d30974fefe5e2b9d3c2f1e309f20c96c0fb405388437621e063de560958e5

SHA512
7ef8a1367c2baac9aef78d94149e7790cddfc96a4cd528916bc583dc601251bc67ad3fd52935727b9ffe00463553b2b0d2327c7e441daf06fdbb0f7ef9f8e7b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3a1d4baba6287c1ac4b9fe68156d1d93

SHA1
e36507b4d9855d2d78bb13dfcce190cd9f2a00c1

SHA256
f7c825c76d8084784817a9bcc5ccc0e311ced66a84a7f443f2d4232ad891b7dd

SHA512
8814e39aa97cbc154925583999ddf443cd57741f221d5468287c10c5e407c4a21f4bab3b6945e4df77e42b5ddf8d6323bca6f0ccaad2e56bab65edfa9afca2ba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5823a0.TMP

Filesize
1KB

MD5
9fff911085521f8586df1470ed10eced

SHA1
66a218b4e99cd361aad7a875306574763ffb859b

SHA256
201845c4fa33182056bcdef900396e7e43ca411bd5a63c9dba987eda348d3ff5

SHA512
d5af61e55a88da4faa854e075c05ce090bfcd72d4a837c1f1fc3364cb1048359c30f5471946204b9877313317739dc224f5471d196296eaa01ded32ad8824dda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
9d8aef4bc76ea2fec3a45ad7c6632467

SHA1
57f7a12ccca3f2b053377ca505653584e4ac9d70

SHA256
9ab83b7b7b358947c9804f46bd94bcbd0985e78302c9b0dcbac73635721968ec

SHA512
f12cd56f7cfbbcb9e98887c08ceb64d0b3250653f9e2124a3d67c51fe6e535cb6fe9ef182012be12d10ad1a681fdfedc2a7cbe92c6d4d6d36353b33408c2e43d

Download Submit