Overview
overview
3Static
static
3You-Are-An...m1.vbs
windows7-x64
1You-Are-An...m1.vbs
windows10-2004-x64
1You-Are-An...t.html
windows7-x64
3You-Are-An...t.html
windows10-2004-x64
3You-Are-An...er.vbs
windows7-x64
1You-Are-An...er.vbs
windows10-2004-x64
1You-Are-An...es.vbs
windows7-x64
1You-Are-An...es.vbs
windows10-2004-x64
1You-Are-An...t.html
windows7-x64
3You-Are-An...t.html
windows10-2004-x64
3You-Are-An...ib.dll
windows7-x64
1You-Are-An...ib.dll
windows10-2004-x64
1You-Are-An...ot.exe
windows7-x64
3You-Are-An...ot.exe
windows10-2004-x64
3Resubmissions
04/07/2025, 17:03
250704-vkm94sbm6v427/06/2025, 15:25
250627-stk51afp3s402/08/2024, 14:44
240802-r4hl7asgrd302/08/2024, 14:41
240802-r2tlnssgla3Analysis
- max time kernel
145s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20240730-en - resource tags
arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system - submitted
02/08/2024, 14:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/Form1.vbs
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/Form1.vbs
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/Idiot.html
Resource
win7-20240708-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/Idiot.html
Resource
win10v2004-20240730-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral5
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/Properties/Resources.Designer.vbs
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/Properties/Resources.Designer.vbs
Resource
win10v2004-20240730-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/Properties/Resources.vbs
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/Properties/Resources.vbs
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/bin/Debug/Idiot.html
Resource
win7-20240708-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral10
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/bin/Debug/Idiot.html
Resource
win10v2004-20240802-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral11
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/bin/Debug/mscorlib.dll
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/bin/Debug/mscorlib.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/obj/Release/YouAreAnIdiot.exe
Resource
win7-20240708-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral14
Sample
You-Are-An-Idiot-main/YouAreAnIdiot/obj/Release/YouAreAnIdiot.exe
Resource
win10v2004-20240730-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target You-Are-An-Idiot-main/YouAreAnIdiot/Idiot.html
- Size 178B
- Sample240802-r4hl7asgrd
- SHA256 a58f42a785a7e8113f870470391e5f7898adfc85e9d95aaec7045b17d36fd782
- MD5 934a02d4710c7c4c60822dc2a0503696
- SHA1 9ba1a0c272b86b18cd397ca9f696a82f5e1cdeba
- SHA512 e5feb23374c7c50398d28de18377dd3a78c7cccb64f742d79c19b42da42cfa949aef32f1b21549c2e89e6fbe51f1f56a6be203fc8f41dd5cc165eeba8dab12ba
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe - Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 1072 msedge.exe 1072 msedge.exe 5044 msedge.exe 5044 msedge.exe 4916 identity_helper.exe 4916 identity_helper.exe 3216 msedge.exe 3216 msedge.exe 3216 msedge.exe 3216 msedge.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
pid Process 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe - Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe - Suspicious use of SendNotifyMessage 24 IoCs
pid Process 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe 5044 msedge.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 5044 wrote to memory of 1004 5044 msedge.exe 83 PID 5044 wrote to memory of 1004 5044 msedge.exe 83 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 3312 5044 msedge.exe 85 PID 5044 wrote to memory of 1072 5044 msedge.exe 86 PID 5044 wrote to memory of 1072 5044 msedge.exe 86 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87 PID 5044 wrote to memory of 3488 5044 msedge.exe 87
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\You-Are-An-Idiot-main\YouAreAnIdiot\Idiot.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5044 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff854446f8,0x7fff85444708,0x7fff854447182⤵PID:1004
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2228,15480658061875193759,319492551935768429,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2256 /prefetch:22⤵PID:3312
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2228,15480658061875193759,319492551935768429,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:1072
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2228,15480658061875193759,319492551935768429,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2704 /prefetch:82⤵PID:3488
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15480658061875193759,319492551935768429,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:12⤵PID:4708
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15480658061875193759,319492551935768429,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:12⤵PID:2852
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2228,15480658061875193759,319492551935768429,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4484 /prefetch:82⤵PID:3988
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2228,15480658061875193759,319492551935768429,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4484 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4916
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15480658061875193759,319492551935768429,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4572 /prefetch:12⤵PID:5000
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15480658061875193759,319492551935768429,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4588 /prefetch:12⤵PID:376
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15480658061875193759,319492551935768429,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:12⤵PID:1544
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15480658061875193759,319492551935768429,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:12⤵PID:5076
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2228,15480658061875193759,319492551935768429,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4892 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:3216
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:3376
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:2332
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 152B
- SHA256 b26d2695dfe8aed4d0d67d11b46d4542c3c9c8964533404dfe32ce7a3e6cfb98
- MD5 506e03d65052f54028056da258af8ae6
- SHA1 c960e67d09834d528e12e062302a97c26e317d0e
- SHA512 15da55267433c41febebbe48983023293c6d436f89a56138cef1cea7deb5cdd7d4bcf58af12835e1152a8ec59e08cfc965e521eb54eed47fe44e1f4c2d1557a4
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 152B
- SHA256 0c4dd77399040b8c38d41b77137861002ef209c79b486f7bbdb57b5834cd8dbf
- MD5 a15dea0d79ea8ba114ad8141d7d10563
- SHA1 9b730b2d809d4adef7e8b68660a05ac95b5b8478
- SHA512 810fc1fb12bceae4ca3fad2a277682c2c56f0af91a329048adbeb433715b1f707927274e3e4a4479222f578e8218663533440c71b22c49735a290f907cc0af1f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 6KB
- SHA256 1a9372b5a33467aadcc7eda8652f3d8053a388cb562d3d71aa9d1076cccb30a0
- MD5 5b64a16cac435d023c85fd7475a6ee27
- SHA1 e58229af17f2ca0545ec2a3de4534b7c1a384e2a
- SHA512 5b8bd1f3a8a4dea65beb2454b7d9f05a0220919228406dbc8ee61b8b7540accd394875fa79eb1813374b4b0c48001d5e9ce56517651eeebbe17f3b5be0164abf
- SSDEEP 96:nVkkxm/GQYmqE1U5RJXrCwpvWMoiVmdeHLDhRUWQyV+VDCziEwb:nVk9f7E/XWGWMXnro
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
- Size 16B
- SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
- MD5 206702161f94c5cd39fadd03f4014d98
- SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
- SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 66d4cb90f444741e00974ab2964687b2f61ce646c8e4fcc1a2b89de116f61f91
- MD5 d624dd308d053630abdf69a040bed740
- SHA1 2c1838864ff56a54f2cd82bc5cbad3b54b2cf4d7
- SHA512 404ee254214b23e71966153c7794765c515ad36af42ef447124b5d402c84a93e484a969cdc81a62535865dddc79a657ec484a24557b161f020f02991a365df73
- SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupj2Qe2RUwQYWui6:A9iIxuERzA83h09RZxYNjcui6
- MD5 SHA1 SHA512 SSDEEP