hxxp://google[.]com

max time kernel
1169s
max time network
1172s
platform
windows11-21h2_x64
resource
win11-20240611-en
resource tags

arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system
submitted
13/06/2024, 02:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample240613-cmd54s1bmb

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
4476	msedge.exe
4476	msedge.exe
2372	msedge.exe
2372	msedge.exe
4416	identity_helper.exe
4416	identity_helper.exe
3532	msedge.exe
3532	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2372 wrote to memory of 864	2372	msedge.exe	81
PID 2372 wrote to memory of 864	2372	msedge.exe	81
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 2232	2372	msedge.exe	82
PID 2372 wrote to memory of 4476	2372	msedge.exe	83
PID 2372 wrote to memory of 4476	2372	msedge.exe	83
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84
PID 2372 wrote to memory of 3816	2372	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffb6ecd3cb8,0x7ffb6ecd3cc8,0x7ffb6ecd3cd8
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1924,8682297594188780148,10949831688677386776,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1936 /prefetch:2
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1924,8682297594188780148,10949831688677386776,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1924,8682297594188780148,10949831688677386776,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2824 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,8682297594188780148,10949831688677386776,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,8682297594188780148,10949831688677386776,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,8682297594188780148,10949831688677386776,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,8682297594188780148,10949831688677386776,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,8682297594188780148,10949831688677386776,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,8682297594188780148,10949831688677386776,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,8682297594188780148,10949831688677386776,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1924,8682297594188780148,10949831688677386776,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1924,8682297594188780148,10949831688677386776,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1924,8682297594188780148,10949831688677386776,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2968 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3332

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4604

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3036

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 4286cd3f23251d0a607e47eccb5e0f4af8542d38b32879d2db2ab7f4e6031945
MD5 f717f56b5d8e2e057c440a5a81043662
SHA1 0ad6c9bbd28dab5c9664bad04db95fd50db36b3f
SHA512 61e263935d51028ec0aab51b938b880945a950cec9635a0dafddf795658ea0a2dfcf9cfc0cab5459b659bb7204347b047a5c6b924fabea44ce389b1cbb9867d6
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 df1e96677bcfffe5044826aa14a11e85ef2ebb014ee9e890e723a14dc5f31412
MD5 196eaa9f7a574c29bd419f9d8c2d9349
SHA1 19982d15d1e2688903b0a3e53a8517ab537b68ed
SHA512 e066d74da36a459c19db30e68b703ec9f92019f2d5f24fd476a5fd3653c0b453871e2c08cdc47f2b4d4c4be19ff99e6ef3956d93b2d7d0a69645577d44125ac7
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 91057ba03cdc51a7a9099b93adcfa3c9ff07b467b45a5ca5664162f1f254b1e4
MD5 71f7ddcf7d98d90d7b0289668c8dd4bd
SHA1 1d842711fc653489ac36207edb4d0cf7a959e8c4
SHA512 dfcd5c749952eb99913ff95c6bb77151f845fde9d74089dd896e32431e11b3bdc295a40efa9c82b1a67f0b84ad4ac0ce9d2cc253b58b0c1b9fdf9075c37e4ffa
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 0737134eba38c435faec561a025d06e0a2f43375c67005ec5cd37f10e80f4072
MD5 6b39ceadfee76a3c784ca342258f6bb9
SHA1 ce84b8cb5738e4060e864c3c3cff74ce7a171d80
SHA512 42a0b796d4915c8b1b82d44b84e4354dd9f81b48996c5082de16db537fc8cc10e628236bb3302c88c6c5740c64478af663f1cdcf027c7552c4bfe693b1a01a48
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 925d22f494184dbd47a810ad0bdb19977abaf9be01f16ab982a28afcedc24726
MD5 85cca91dc264ac0f5fd9c4b2854ebcd4
SHA1 703f9a56150a6e31ff537a4cf1b191c4e06a7f23
SHA512 56185d896151424962a479c95eeedb6353abb3f8b348c6e97f0bf5734116b658a8a83436da5ae6a39657778a07995b8bf5c0f015d1fd875b9fa718bcd9bcc51c
SSDEEP 96:nIk3Boxm/DnmtSPXekmNZ0s/lwSMqi0MoiVmdmu71jItJEH0WQyV+VpAiX3wI3:nIk3rCkPXekGZ/Mqi0MPu7hI3gLe93
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 ec9c5ecbdc5220dc6108389c405be10e75ff9d19571b1ad8506af73a9ca26256
MD5 471277d9e8efd54facc753e15e29ae4e
SHA1 fd4f18abe3d4057f66f9671e3a5be4a07d374eaa
SHA512 0931e3ed32b6a68ad79d0920e10e5425dd4d98ebdb295fdb9722cf5f6fc588c8044a4478afa91a633ed69f4c215c6c3ece344febb6bbf06a554ccf428d8cb84b
SSDEEP 96:nIk3Boxm/DnmtSPXekgNZ0s/lwSv0MoiVmdHIFJEH0WQyV+VuAiX3wI3:nIk3r6kPXekwZ/v0MAI/gLH93
MD5 SHA1 SHA512 SSDEEP

Submit Download

c67054c5-af61-4696-b276-0a1ef2649854.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c67054c5-af61-4696-b276-0a1ef2649854.tmp
Size 5KB
SHA256 73e669e8ee07854f0800b31d0fd50d93d992dcc0e82c153eae5cc47750f4a989
MD5 17efae8e52018c1803a2578387c238ea
SHA1 1510ca1826bc7169d8f405d34afb94fb62c57b75
SHA512 a710dc017351e01df372e9c127f2ad10c1e1035b6013e13d18d81f079ab385f0bfda658b0703a394bfc1a330daa05458c3b62968b4d3655de1c03e1fcc243e06
SSDEEP 96:nIk3Boxm/DQYmtSPXekgNZ0s/lwSv0MoiVmdHIFJEH0WQyV+VuziX3wI3:nIk3rIkPXekwZ/v0MAI/gLM93
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 3c96b196dd12b88a6190e4eb3f2039a7685d3fc24b1e7f67cafbb9011affd126
MD5 575b1cdc16faf76bfb274ad0de7be008
SHA1 62396d68ac7c3a461072328a0ac7712d267935ce
SHA512 3a824b827d88e2a6057fc6a32567b0190f05e1a958ff5a3bdf87e3308c2a37e37825331b5715001aede36721e2b65b6e6f0af0ca0fe7e9808ab15684934dbbc9
SSDEEP 192:coCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxA3Lra5c7/oe2RUXrRrAI6km7YvM:M9iIxuERzA83h09RZxA3Lrv/GORIkm7P
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 5214af223f4af8eaae1fc79be49a17d702e4d5a8eb2faf1d4b8f6fffb67015d6
MD5 127d26e6afce77d057eed326898815e5
SHA1 7bb53c0d148569e912010203d3aaf21fc77bd3fb
SHA512 5c1a0775e0a74ce480bf81e26456f1080c5d9dd7a65bd4a7dd4a5a7d978e3d1105f3a5843f328602561bba743d68bd56744f055ae0eb0ca2afab0fe2323b5b7c
SSDEEP 192:coCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxASGHra5c7/oe2RUXrRrAI6Zo7Y0:M9iIxuERzA83h09RZxASGHrv/GORIZoD
MD5 SHA1 SHA512 SSDEEP

Submit Download