cf688eeb913825077e39609a31eec667206a9dde0e88cecc065eaf89ffb561ce

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24/02/2024, 19:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a28b88e71cec35399d0a74d3cce33f01.html
Size 34KB
Sample240224-xzcs2acb46
SHA256 cf688eeb913825077e39609a31eec667206a9dde0e88cecc065eaf89ffb561ce
MD5 a28b88e71cec35399d0a74d3cce33f01
SHA1 fb550ab4e454388a44ee493267cbe1768c2ea3e2
SHA512 07b6173fd2e5236b455b541cc15bd1bc0cc4b100510b7c0462ca46cc1ef8a6b5a4890b5186c1441a6a6b81df2d190a8b176a58616440ffed225e71795f5df3ac
SSDEEP 768:1IRIOITIwIgIVKZgNDfIwIGI5I6J7SXIRIOITIwIgIMKZgNDfIwIGI5IVJ7S4sNz:1IRIOITIwIgIVKZgNDfIwIGI5I6J7SX2
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4992	msedge.exe
4992	msedge.exe
1816	msedge.exe
1816	msedge.exe
4888	identity_helper.exe
4888	identity_helper.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1816 wrote to memory of 4208	1816	msedge.exe	26
PID 1816 wrote to memory of 4208	1816	msedge.exe	26
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 1372	1816	msedge.exe	90
PID 1816 wrote to memory of 4992	1816	msedge.exe	91
PID 1816 wrote to memory of 4992	1816	msedge.exe	91
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92
PID 1816 wrote to memory of 5016	1816	msedge.exe	92

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a28b88e71cec35399d0a74d3cce33f01.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ffb20d646f8,0x7ffb20d64708,0x7ffb20d64718
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1960,5233709042989450268,18037511720085525033,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1960,5233709042989450268,18037511720085525033,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1960,5233709042989450268,18037511720085525033,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2944 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5233709042989450268,18037511720085525033,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5233709042989450268,18037511720085525033,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5233709042989450268,18037511720085525033,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2144 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1960,5233709042989450268,18037511720085525033,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1960,5233709042989450268,18037511720085525033,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5233709042989450268,18037511720085525033,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5233709042989450268,18037511720085525033,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2124 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5233709042989450268,18037511720085525033,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4100 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5233709042989450268,18037511720085525033,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2460 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1960,5233709042989450268,18037511720085525033,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5864 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4276

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3292

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3440

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1856

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 e83daa7b2af963dbb884d82919710164e2337f0f9f5e5c56ee4b7129d160c135
MD5 1af9fbc1d4655baf2df9e8948103d616
SHA1 c58d5c208d0d5aab5b6979b64102b0086799b0bf
SHA512 714d0ff527a8a24ec5d32a0a2b74e402ee933ea86e42d3e2fb5615c8345e6c09aa1c2ddf2dea53d71c5a666483a3b494b894326fea0cc1d8a06d3b32ec9397d3
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 2f5ba493c7c4192e9310cea3a96cfec4fd14c6285af6e3659627ab177e560819
MD5 aa6f46176fbc19ccf3e361dc1135ece0
SHA1 cb1f8c693b88331e9513b77efe47be9e43c43b12
SHA512 5d26fdffebeb1eb5adde9f7da19fe7069e364d3f68670013cb0cc3e2b40bf1fbcb9bdebbfe999747caf141c88ccd53bd4acf2074283e4bde46b8c28fbae296f5
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 84f8110c5a95aca4e516bafc83efbd2228e39896e38c855506660ee916b6b657
MD5 8d75009b279a267b3c612ddaa637d3bc
SHA1 6f6b74a331c865780118071d017276b9f2a23383
SHA512 2b5a40c8f3486cabf847259e35cd7c990465187d39dda29aa473676f4a97b5a722a5ab88b4bdeee1832b9bf98ab032c0ecb232ad00f4ea258ccd82fce6dd3e6a
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 533641aa593dd4d754dbc1a3978c75a13429e1f4cb93c8102cdd643649afb601
MD5 8ac20cf6879207bfeacfc1ec38204e1f
SHA1 d54b175e0a929f32e9ca24a8f94a20d91027e03d
SHA512 d81ee0d9eaa053cc09250ad62718e0e6700d07bc934904e05a62377228d10360ceb4e40ed755325568f98bd517fd0fa763c3fb8f4233a326743486222e3b888e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 ea936235074bc20d9e98d5ed33ef64a924223840bf68bcb0facbb588afcc1394
MD5 2d096d43228e555c98c4fb772cae3b02
SHA1 cf04b40b1c46b3fb4004f6cb35aa9794b13c5d18
SHA512 48f997aece11c2fd3758162469c18fef52cb3a135c13b0c84458775bc4b2fe6244f6fa512e9e1fff55bce718dbd25edd39f2bf4ea62c3fc43f49dd0fededb251
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 123d99b0d64c80f03f8d17390ef72649be945fb30fdd19033e904e5bc614ab1b
MD5 7b4a49a5cd8551cdc29b3c2566ad13de
SHA1 c5aa697a094a20de60f730219a0c86c66e0544b2
SHA512 7d189bade8e1e04012a9c913d76443b6dfc759590d2f59480588be2df4f5c6c68c943db75753c736ffe564e5da919f969edb50f845c5fb8efeaa826d4af320a3
SSDEEP 96:n+kPSxm/FQYmqY1rKAzowpvWMoiVmdeHl5Erhp9WUWQyV+VD7ziEwb:n+kPPOTBvEGWMXlGhpErt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 02b68c251c9d45048a828d7c8dfb85c6db428955e458719f70e1c5ea5d922df8
MD5 9117ce1044aabc51006d1906d59b57f1
SHA1 7972ac576b736997c608ee78743b1308141d1a9b
SHA512 30e5926fd2be4c497903a4bb95ded147f6c3cbc6df94c3ed69036ed8992d98c3143bbd3b14a18aebd5e2c0ec10b0fd62b1449cb4cee1fd5d7de2baa9c65b4d7c
SSDEEP 96:n+kPSxm/FnmqY1r0AzowpvWMoiVmdeEQvEwErIMnSFs2l5Erhp9WUWQyV+VD7Aih:n+kPP8TBlEGWMjMwErIMnOs2lGhpErg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 bbfc20830630e59222222349c9a2e1a468404330cbe44023a11fb6fd3d45ef3d
MD5 5893c5b4ce0e15aab31c96910f4240b0
SHA1 58fa70a3290e34e701f3a199a1ee385aa21afbe3
SHA512 326233000429a529ef2c998a9a59c6962ea42de65d8aef5d576b232d13e01fc59b1c2b6930190d5a80b58619c132301faa4b2409e402e51a69242411d61ed3fd
SSDEEP 96:n+kPSxm/FnmqY1rKAzowpvWMoiVmdeHl5Erhp9WUWQyV+VD7AiEwb:n+kPP8TBvEGWMXlGhpErg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a0ab624e9a40764ecb68b1783733f48c500bb7e7f616f40f2ece3987cd38a9ec
MD5 d5248113661ccca7406c68a0c6446ae7
SHA1 e48700dde10d9df39c0e55d8aa45bca42d1bb9d5
SHA512 48a321901a0f7dde9fdf99a89e8b979ec4fccb1dc28a601bf05bf555b1ab87c61504a897d89c64dee39ec16aeaa31cde344305635c5c6aa9f8a1382c8aeb0b37
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuptRe2RUfVhcbAh9xUX1MPeF:A9iIxuERzA83h09RZxYtF4VLh9E1MeuA
MD5 SHA1 SHA512 SSDEEP

Submit Download