hxxp://google[.]com

Analysis

max time kernel
145s
max time network
139s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
28/05/2024, 15:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample240528-snhspaaa7v

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
2824	msedge.exe
2824	msedge.exe
3928	msedge.exe
3928	msedge.exe
1872	msedge.exe
1872	msedge.exe
1272	identity_helper.exe
1272	identity_helper.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3928 wrote to memory of 4976	3928	msedge.exe	76
PID 3928 wrote to memory of 4976	3928	msedge.exe	76
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 692	3928	msedge.exe	77
PID 3928 wrote to memory of 2824	3928	msedge.exe	78
PID 3928 wrote to memory of 2824	3928	msedge.exe	78
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79
PID 3928 wrote to memory of 3640	3928	msedge.exe	79

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffdb4a83cb8,0x7ffdb4a83cc8,0x7ffdb4a83cd8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1984,14225922349898047959,16152100351723712539,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1984,14225922349898047959,16152100351723712539,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1984,14225922349898047959,16152100351723712539,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2868 /prefetch:8
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,14225922349898047959,16152100351723712539,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,14225922349898047959,16152100351723712539,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,14225922349898047959,16152100351723712539,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1984,14225922349898047959,16152100351723712539,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,14225922349898047959,16152100351723712539,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,14225922349898047959,16152100351723712539,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1984,14225922349898047959,16152100351723712539,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4780 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,14225922349898047959,16152100351723712539,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,14225922349898047959,16152100351723712539,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1984,14225922349898047959,16152100351723712539,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5892 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4568

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4856

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4156

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 4d063bb78bd4fa86cee3d393dd31a08cab05e3539d31ca9f0a294df754cd00c7
MD5 de47c3995ae35661b0c60c1f1d30f0ab
SHA1 6634569b803dc681dc068de3a3794053fa68c0ca
SHA512 852a9580564fd4c53a9982ddf36a5679dbdce55d445b979001b4d97d60a9a688e532821403322c88acc42f6b7fa9cc5e964a79cbe142a96cbe0f5612fe1d61cb
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 3db2f8ac0fb3889fcf383209199e35ac8380cf1b78714fc5900df247ba324d26
MD5 704d4cabea796e63d81497ab24b05379
SHA1 b4d01216a6985559bd4b6d193ed1ec0f93b15ff8
SHA512 0f4803b7b7396a29d43d40f971701fd1af12d82f559dcfd25e0ca9cc8868a182acba7b28987142c1f003efd7dd22e474ac4c8f01fe73725b3618a7bf3e77801d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 a4584ca5c28afeb15d8fd4f82972c26e08db3b11aab3c1d9c2d7e674b5363e7a
MD5 857e03c41f453db8e1609dbe08388e28
SHA1 7311599d7911b6a804c21f86830b9e4e68e71d42
SHA512 0c940b627a50189ca09c1e57482e18e48f8ce24a0679acc5e520f007496c035a2af4913dc8af4ee6a9e7203e4232f7814ae0407834a15b488601a0400ae156b7
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 d22004bc46521e55c220a1b68512cd1ebb2084f35ff937a311675d88ee9c0a66
MD5 f005c11f3799ddefe785c3740821fb4f
SHA1 d7ca1b5a9e0f87c0d2682bd9bee06dc993c83cc1
SHA512 5a0aab7346f2741588ecbea519ede070f0d330490d9427421cf67ef8c04cff43bbec593a32668de6d0164a359defba6ee068fd0e29119432756c7e2112e9ccce
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 05563fc5590fcc0eb06e542b5a3eda1c9d0dc8a05d209ca64e8b1f94a616c9f7
MD5 8aa1713c8ea1d4b3774bb0f6d3de4bb6
SHA1 c06088b093a0fdda5c5d87f54c688298faa3c00d
SHA512 6e86a64ab204c6a68d1fb236a38161030521adcebd8681788406d0ab65d9946809e9719c3a57a9e95868e4e5820639ffec0025053af38a8e96feea498944788a
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 c13d3f43b6049c31328b699e2e5b3c24841818c6fdd9843e29d080c572a731f8
MD5 56f2d3effa155d36fada30ab5de07742
SHA1 7cedc9eb742bed467ac62fc11187c3ecec5ec398
SHA512 adfa67e51daecc11f2f7fbb72ebf6f04cf77e25e7a89811b6f72f10d431e7b5e4a4dfc615a6122bd4bb1877d59454d8b8fd993b34c046f311e84ffa2eb158027
SSDEEP 96:nPk3g8xIk8wSv0MoiVmdHI84Jc0U0WQyV+VuziX3wI3:nPk3hIk8v0MAIpc0ULM93
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 11bfb0ac188111dd230bd0ce557cfe2e0b784871b710d89ac43c2ba66d39ed21
MD5 01d6c84b683adb5eb8ab664e1c4732e4
SHA1 c0134fc29afb6f8a90f5f4ec8e6bbb660eb5a7f0
SHA512 0639d0942d8ff291b7f088d0c21b0ab4a32ebf3958d39447a56ba86dbc89ef832611329c05f01fcfd450d8ac6cacda111dc48d5885218693b190ba6035c00533
SSDEEP 96:nPk3d8xIk8wSz30MoiVmdkuw1jI8IJc0U0WQyV+VuAiX3wI3:nPk3AIk8z30MpuwhILc0ULH93
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 1898fe770e31892b257dd5e8a538ff424827f2b635d306f3dae90cc1f5acd789
MD5 4e6fe63c8c75a7ce83e8fc15efd3c231
SHA1 77dab0cd5310c14ec10c8a63282373d2e0eff9c9
SHA512 03c9210476df703d5dd05eaa4742506bf14b7aecdcd90f554cc197177f28f8b671a21b2a3da98a84981d58d4995e1360d7c5cfad87ddaa7d8087c8bc5e8a1437
SSDEEP 192:coCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxA3m+gLe2RU4ORASKBL7YvmljEWx:M9iIxuERzA83h09RZxA3dM1LSGL7Yk99
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 2f70ea2eac3d38815249c7c44a1cfc4564904ef1af93b4c1a433dd0f838eae59
MD5 9831376b8c9927a8f86815d550094037
SHA1 74a6f16811378830d0daa4419dcfcb8bb672619a
SHA512 593a87fc2b0ef6022caa7fe0f7b08ec8cec37cc1d7c8c634aa6a826be37c4619a06b6bfd19c397cfd91b0be178a9b2a78a02ed7486adf42ee63916b065659fad
SSDEEP 192:coCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxASG7+gLe2RU4ORASKUK7YvmljEw:M9iIxuERzA83h09RZxASGCM1LSzK7Ykz
MD5 SHA1 SHA512 SSDEEP

Submit Download