64e3052a987ee2b403bc44367b7149773436ed8a3220dfac1ced3a25f7e31ef8

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 09:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 55KB
Sample240603-llv7nsbe87
SHA256 30be219736e96ab2788ee824299911f1299a95e01fee04e0645a3e42dbb6985d
MD5 54d85a391a54c778410586efed603ea8
SHA1 00540a367ae73af09beece63fc38cb21ecc93b28
SHA512 9f00ba729235dc33cad060bc498bf0b64cb2fb002c8df4cf15a1286a3b6c929bd8e5003eba4b39553fd7cd254b01f365bfff1675e91658fa0ff1fb746f7eceb7
SSDEEP 768:S5G5RLOJABAdZok4UJMbtldSUfMjq5W5NxGhaqSF9Md:S5G51OJABAUWOdJfIzMd
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3456	msedge.exe
3456	msedge.exe
1240	msedge.exe
1240	msedge.exe
1384	identity_helper.exe
1384	identity_helper.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1240 wrote to memory of 2076	1240	msedge.exe	83
PID 1240 wrote to memory of 2076	1240	msedge.exe	83
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 2096	1240	msedge.exe	84
PID 1240 wrote to memory of 3456	1240	msedge.exe	85
PID 1240 wrote to memory of 3456	1240	msedge.exe	85
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86
PID 1240 wrote to memory of 3688	1240	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe3f9146f8,0x7ffe3f914708,0x7ffe3f914718
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5464 /prefetch:1
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4220 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4220 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,7495367883826001204,6552338363948514061,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2348 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3452

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3848

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2100

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30
MD5 2daa93382bba07cbc40af372d30ec576
SHA1 c5e709dc3e2e4df2ff841fbde3e30170e7428a94
SHA512 65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7
MD5 ecdc2754d7d2ae862272153aa9b9ca6e
SHA1 c19bed1c6e1c998b9fa93298639ad7961339147d
SHA512 cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 fbecf79c1951c48e0d307f7273bddbc406c5185bf671bed9677aa02eba14bce9
MD5 792e97fde7c071e69b4195130990ab38
SHA1 89b5f95ca26b86efe88a9d9ab788ca8616277bed
SHA512 d563557541e8e130f91e5a90efdb727be0d2318d69cd6e159843a4dbee20c9bb256d1bafc609bbc3dd22ad3550aa5639091ddd1307405d9b5f6415eb4f1c32a5
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 57a2486a701521f9a55c14f1d40627cb00ba648747411fd3d4d110099dea0f61
MD5 012021bd3993ad2c7b1ae54f56679c2f
SHA1 36f71538a80f4015394faf46367450ecad680276
SHA512 b74276ff9917aa1ae4bc7980ebb44574ec3e250a03a437086dc4bc76e35e7c795ef885bc86093ec32fd95fb8af77ebb1cf78c4ea760714418eb1858f59139380
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 079cd46ec858e472f98f16c41115c834081f6d3af509ba5ebf4ebb5846db3724
MD5 681108642d09a0dd1c378554a4e5585d
SHA1 ebf7a24af40dd543aab6991a40bfaaf7252948f4
SHA512 bf1d7baeac36d12326cc59515ad5fcf676017ad6ef37be34693612fc1f6e361a31b55b1a3064c41f40f6068b2e606cb9a699b7c1dcd2c5f79ae479517a5d7141
SSDEEP 96:nTkOm1nv3wpvWMoiVmdeHplwtSacMz+UWQyV+VDCziEwb:nTkhZvGWMXpLXMz+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 047426328e2024d7842d3e266dbacf234a108e72099253a527baa5127f6604c9
MD5 ba01e135200ec51c1b86b68b83cbc2db
SHA1 e2e4bae8762123f967051c99a7ea3b901c61766c
SHA512 7f0722e22e53e7dd271265e599ef5ce464fe8bc3b2e3d4e7aa419543d6ac9f917b03e60594db630225e73f6099ee9c3e86a952e66da23fbf747cd7bf6acf2a31
SSDEEP 96:nTkFm1n33wpvWMoiVmdehNeu/VkEqqfzEwVNAW2plwtSacMz+UWQyV+VD7AiEwb:nTkIZHGWMxNeu/6foYwVNAW2pLXMz+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 a93b169ec9ed94db3456790cd82468a81fa35a16c1b66540fc61556f67670e6e
MD5 74e8d9ba57457c49ba0cd487d08f1212
SHA1 2ccc84c89831031ccbe9fef28bd815dafecebe71
SHA512 8584d3c330ed06ff5bf7ba71517819fa9eda097c812abb99a77039bbb6ab7ac389ecb7812fbc04895e039729e018647586fb5e0b60fc5633122adab82ae65b0d
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupKIe2RU92ZR3z2OMDCRHqlQ:A9iIxuERzA83h09RZxYltRaOMWRHqlWV
MD5 SHA1 SHA512 SSDEEP

Submit Download