29c20f2ed4e359f79f5cd23316fce8066ab45949d5ce8bed6e3b83abb54de4e8

Analysis

max time kernel
145s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12/02/2024, 09:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
96e118630d400d5916bab176273af016.html
Size 42KB
Sample240212-lyltrscb77
SHA256 29c20f2ed4e359f79f5cd23316fce8066ab45949d5ce8bed6e3b83abb54de4e8
MD5 96e118630d400d5916bab176273af016
SHA1 dee4c54c55e5308d127b063f6dd741b7ecb06eb6
SHA512 b2640fd13c874f1fe5809e4c287266b73ffa7494433f90dcaf375a3ee111d9d453599000182c955f4decb1398b2716291052668a3a12321f93e184324205516b
SSDEEP 768:fGFM1vuEXKkd9gwDob/eO5XwybngwrNKuXXVGqzHfpQlfSDs/8D6xUqvzA26lW5i:fG2lxXKs9gwDob/eO5XwybngwrNKuXXN
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
3572	msedge.exe
3572	msedge.exe
4940	identity_helper.exe
4940	identity_helper.exe
2996	msedge.exe
2996	msedge.exe
2996	msedge.exe
2996	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3572 wrote to memory of 4236	3572	msedge.exe	85
PID 3572 wrote to memory of 4236	3572	msedge.exe	85
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4712	3572	msedge.exe	86
PID 3572 wrote to memory of 4736	3572	msedge.exe	87
PID 3572 wrote to memory of 4736	3572	msedge.exe	87
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88
PID 3572 wrote to memory of 1472	3572	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\96e118630d400d5916bab176273af016.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff1ad546f8,0x7fff1ad54708,0x7fff1ad54718
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,5584556390445993742,13664368876389858481,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2056,5584556390445993742,13664368876389858481,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2056,5584556390445993742,13664368876389858481,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,5584556390445993742,13664368876389858481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,5584556390445993742,13664368876389858481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,5584556390445993742,13664368876389858481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3036 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,5584556390445993742,13664368876389858481,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,5584556390445993742,13664368876389858481,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,5584556390445993742,13664368876389858481,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,5584556390445993742,13664368876389858481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,5584556390445993742,13664368876389858481,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1624 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,5584556390445993742,13664368876389858481,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3928 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,5584556390445993742,13664368876389858481,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4040 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2996

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3540

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5052

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 32e343d2794af8bc6f2f7c905b5df11d53db4ad8922b92ad5e7cc9c856509d93
MD5 4d6e17218d9a99976d1a14c6f6944c96
SHA1 9e54a19d6c61d99ac8759c5f07b2f0d5faab447f
SHA512 3fa166b3e2d1236298d8dda7071a6fcf2bde283f181b8b0a07c0bb8ba756d6f55fa8a847ca5286d4dbabc6dace67e842a118866320ac01bd5f93cccd3a032e47
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 a7cde5a13e7a4c85b86ba3dcc6e73026a5f06a9163a411d4f0f3fed45db8ca5b
MD5 03bca2e0b12595844489f2d9bf0c4933
SHA1 2a727b99b100b66c8ff8d33b9063258ac7dff89f
SHA512 b0d6dd1119fde54de4b0b71f7f7543bfe95d53646c1a356904a9cefbb1676dcd9b820fdbc6305af0fd73d9197bb9c0a72ca08fde79dd7f67cc7592b43a1d7c7e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 592B
SHA256 3c6422800d365c42dc9d90442f327db9d52d222c61d3e047c501cdde0087f168
MD5 fd5b89cfcb44592c56bb8f0f67f19b76
SHA1 8dd4a5f620cc1e2ffec56d4c260a4f18850d19c2
SHA512 7f495900c636db6449cd21772dcdfda5a24cec15b1aeaeadfcbbf7cfd4a6b35eacf822a2172cae8ed4531b40f2915dae22bf88b6ff9aa7af26701fc2cf4fe134
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 6df4a38a77018767e3b4b7359f62555484e000bb7ad2933ca39b25bd8178ba57
MD5 f542d20689535e4bd61f2827016d0640
SHA1 f391e0e470c208ecd074cfaabf99b288785c470d
SHA512 dd4790f6703db105df0280daa09d95b17235370bb2f4b9409eae0aead1cb3ebf2e57517a64d800725e6bb2153e618d20497d86bdbf076a88d6b17ef4bc33a2a7
SSDEEP 96:nPk4k1ZpFCh3wpvWMoiVmdeDPR2PYNcFUWQyV+VDCAiEwb:nPkVLC5GWMLR2P7rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 51496ddf17605382a1bd06409264ec4633b5b0b575118ee94ebbfaf891801a81
MD5 f045427da11e4528260b1acf2a0e11d7
SHA1 705460164aa6897a9c2eec881101b2f474409899
SHA512 9988a8a722f77317b782f8a6c97edb55d1e178310425d43845cb6555d72200a3fefc2effd70a950857377d5f006334b6ae41f61b3155b27c9dbceff41877dd51
SSDEEP 96:nPkYk1ZpFCv3wpvWMoiVmdeW2PRM2PYbcFUWQyV+VD7AiEwb:nPk1LCvGWMG+RM2Pprg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 74fc5d639c0801cfbf9d48f68a7d57bec570cc98e0a641466a8c45935122f02a
MD5 62dad977b3004d568874e8d690bcdfc8
SHA1 d6f2ae98f1b77a66ad965e40ac1321c1c1b96194
SHA512 2586e24ad1e074f4a810a71c410c1eae612a559a9eb6cee56bde10abad3dda701a27aa1e9020999ce214bc2fef7a5a3407ca5163744abe69c4f4350c0f722eb3
SSDEEP 96:n9kdk1ZpFCh3wpvWMoiVmdeHPYqFUWQyV+VDCzia:n9kGLC5GWMXPjrj
MD5 SHA1 SHA512 SSDEEP

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 24KB
SHA256 185450d538a894e4dcf55b428f506f3d7baa86664fbbc67afd6c255b65178521
MD5 c2ef1d773c3f6f230cedf469f7e34059
SHA1 e410764405adcfead3338c8d0b29371fd1a3f292
SHA512 2ef93803da4d630916bed75d678382fd1c72bff1700a1a72e2612431c6d5e11410ced4eaf522b388028aeadb08e8a77513e16594e6ab081f6d6203e4caa7d549
SSDEEP 768:nFeW8o8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOLl+YrU7C:nFeW8ou1jaTLI7C
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 32391de50570e73b5c62e82748b97fe5e3630d84d2402ef57d7e0be15d08fd4e
MD5 13e18e7248e7b2c21fb0a006e75936aa
SHA1 322b4513b682eacd4d203497c5cde4ca7e9d38d6
SHA512 3f06ebc34e0fc76e6dcbd66e2a518dc185e14337295cf568e5c922cb4e471c0acf4dab5bf9b245e2857c3ea5eb78b64a03c126c791dc2b72e45f093997c00594
SSDEEP 192:uoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupkle2RUOvsgFhTw8AftwKCM:69iIxuERzA83h09RZxY6Eg486W2T
MD5 SHA1 SHA512 SSDEEP

Submit Download