e5edd4dd80ec28f97f3747eb1328581b0e0d42a147459991728708de8c9cf087

Analysis

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15/03/2024, 18:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cc13f986565b34d3473c0ffefac0e83a.html
Size 57KB
Sample240315-wq7rdafc71
SHA256 e5edd4dd80ec28f97f3747eb1328581b0e0d42a147459991728708de8c9cf087
MD5 cc13f986565b34d3473c0ffefac0e83a
SHA1 04b5a0d25240580644cb2ea8dd246a6811d088d4
SHA512 ad65362add5c8a1d5dd7aee3c12bb8d7600bf48cca9ed74b58a0b2b34870b05d4623a92d814cba1395da15b3392b255f8c525f9fc861bc2bc6e8870b13f15889
SSDEEP 1536:gQZBCCOdo0IxCKZCKfAf0f5fiflfAfkfKfEfgfJfJfhfcfBfsftfDfufqfmfLfD0:gk2y0IxvI8hqtYcCMohRZ0J01rWiejr0
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
1236	msedge.exe
1236	msedge.exe
5624	identity_helper.exe
5624	identity_helper.exe
5600	msedge.exe
5600	msedge.exe
5600	msedge.exe
5600	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1236 wrote to memory of 1112	1236	msedge.exe	88
PID 1236 wrote to memory of 1112	1236	msedge.exe	88
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 764	1236	msedge.exe	89
PID 1236 wrote to memory of 4400	1236	msedge.exe	90
PID 1236 wrote to memory of 4400	1236	msedge.exe	90
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91
PID 1236 wrote to memory of 4720	1236	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\cc13f986565b34d3473c0ffefac0e83a.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe93f446f8,0x7ffe93f44708,0x7ffe93f44718
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2888 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6456 /prefetch:1
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,17182714985683174245,17289905387370695326,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1948 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5600

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3448

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3864

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1ce86be0476a2a9e409fcb817126285bc4ad83efd03ee06a2f86910fe18d4d94
MD5 73c8d54f775a1b870efd00cb75baf547
SHA1 33024c5b7573c9079a3b2beba9d85e3ba35e6b0e
SHA512 191344f5830cfea68499bd49073ffa7215a42265a9629d203d07849b2417c0ffdbdbf288bf2c669e91009a0d7e8bd6a6b378c92fc283049141231ca7bf4da3b8
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 87bf9a4c3564eb3d8bef70450da843ae6003271222734c4d28d9961c52782e0b
MD5 4b206e54d55dcb61072236144d1f90f8
SHA1 c2600831112447369e5b557e249f86611b05287d
SHA512 c9e8d2452368873e0622b002a0c2f8a2714b5897a09475738a9f9740122d716a9f0d3841725230d58e039564c820d32a6f3a675a7bb04bd163bab53dcb4e22f2
MD5 SHA1 SHA512

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
Size 198KB
SHA256 91558d69c027808e375e11c80166dc6ba245fbcfce715c9588decc55b4a33dad
MD5 06d38d9bf028710762491328778f9db6
SHA1 83e1b6cbaad5ca5f6dc63453da324f8df28de193
SHA512 b197e5f92add72688396a07246ee9842a3b0de36508aa57f0254531cb109c77d0392e00ea28e006f9fbab1b8fee9b333998946de47ca7526b631e8c810780781
SSDEEP 6144:tawwLYHGHR81/9HMXA092CsuwgfUe9Gpbq+bOmsHWwbI:wXLIHGv9V922SOmxw0
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 504B
SHA256 ca65cf8c11cf9329bcd3a08843c3875b20a6142677c3085b500d113dc8c45f44
MD5 cbcec79c14d7e6dfa6b585f33c38a30e
SHA1 e630b35adccf6734e2854068525f97160af7dce3
SHA512 fa2af63685d2f5bb78cf7caa91ea24c8f6cfd3e5bb34c9862b89142ef923a13fe4f8331756c16a64f8089ca2c3397fa90efa563ed325900cf743604c63eba5b3
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 13dbecdbf719f364b40628e536a4099aa69cbed89baea0dba1a824c8094ee926
MD5 813e4d1f99bdc9dd7f91f17a98389195
SHA1 eaf38a006fbb880e283d6e278ae83f44ddb0c141
SHA512 76113b6325d6e77bbda30959fe4af2ca2c57eae4cdf9b410a4f5a24b88d2d06ca36b3f0638bdd05ebf6eb737f4eb20cb72d26ed37e6c11479d5faaa620aded8d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 8c4397f599daa6ec0bc2e810b3663be883b829b8fde731f00a1164bd94041399
MD5 8f5b3e230c64e54d45d899c7a38945dc
SHA1 66bef281bb4a2c1165146310d4bab4efdd8ce008
SHA512 5d01b8c73f77a42f71b87ff5b9377f0a56f95bdd800e817961841a231568cf96ffb1bb4ef9b98c2c8abea008452b6cd557e8a1e320c257456c79d2181a7aa94b
SSDEEP 96:nxkoY21PqowpvWMoiVmdeHDMrf+UWQyV+VD7ziEwb:nxkONLGWMXKf+rt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 811c867f72c741a88cc30a84cfcf919e82e41ad05e72a37a360ac67aebeb4819
MD5 3231ae28ac0d12371090b7027b529c8d
SHA1 70f5b6ebf50984315c2d9604b05afc9185272392
SHA512 d9d0542ac2750bf044bb6ae3346359e0efeb596a52e481accc8957d7be81033e7531a1e2f733943770e1532c2a207c4b9eddd4bda66b628fcc47bfe4593e2b97
SSDEEP 96:nxkDY21P6owpvWMoiVmdejG8Oo2DMrf+UWQyV+VD7AiEwb:nxkLN7GWMnOo2Kf+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 0df4f7fabcfa091e1680b5dcfba8c80f319c8874d5048c4e6513e9c44936d4a0
MD5 a726da731699ebb0e9ab33dc27b240e7
SHA1 8e99b5f8321316670861d2777af3462f19bd77fc
SHA512 4d80b2e03fc7c8cc3b86e865ef5e74fb43957c51c8d178c34a2b95dbe122e2d94c593bc2c8be4db38e3d519f426f7250c8c20f48f94ecd19dc365fa95f41c414
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupFtrme2RUKy+bp69xUX1MPh:A9iIxuERzA83h09RZxYHov69E1MeuBOe
MD5 SHA1 SHA512 SSDEEP

Submit Download