a6f64d48dcae4636f5a6c133cec13821e7aed58c8d2ab52963baf94d60cecd94

Analysis

max time kernel
145s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19/03/2024, 02:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d4fd31a923661ecae911edfc733a1175.html
Size 222KB
Sample240319-cy46nsfa39
SHA256 a6f64d48dcae4636f5a6c133cec13821e7aed58c8d2ab52963baf94d60cecd94
MD5 d4fd31a923661ecae911edfc733a1175
SHA1 c90d6da6e166992f26f6f06733573382eda23c63
SHA512 bc28070828e60f1fb8fd93bac122c014074ddc2d088d6da2fdd4616f08f346751d3ec94f333b98e518e30350162cb5c172daa01fe1ecb7505baebbab4a1df465
SSDEEP 3072:6rUEvNz//GyeKk+gAMYtCRCcdCcoPCcxNbZhnkRb8:8UEvNDc4ctcB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1704	msedge.exe
1704	msedge.exe
4776	msedge.exe
4776	msedge.exe
5220	identity_helper.exe
5220	identity_helper.exe
1068	msedge.exe
1068	msedge.exe
1068	msedge.exe
1068	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4776 wrote to memory of 2624	4776	msedge.exe	88
PID 4776 wrote to memory of 2624	4776	msedge.exe	88
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 4868	4776	msedge.exe	89
PID 4776 wrote to memory of 1704	4776	msedge.exe	90
PID 4776 wrote to memory of 1704	4776	msedge.exe	90
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91
PID 4776 wrote to memory of 2852	4776	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d4fd31a923661ecae911edfc733a1175.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffb0d946f8,0x7fffb0d94708,0x7fffb0d94718
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,1107919747813837078,5170935531693568334,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2160,1107919747813837078,5170935531693568334,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2160,1107919747813837078,5170935531693568334,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2932 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,1107919747813837078,5170935531693568334,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,1107919747813837078,5170935531693568334,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,1107919747813837078,5170935531693568334,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,1107919747813837078,5170935531693568334,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 /prefetch:8
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,1107919747813837078,5170935531693568334,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,1107919747813837078,5170935531693568334,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,1107919747813837078,5170935531693568334,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:5352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,1107919747813837078,5170935531693568334,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,1107919747813837078,5170935531693568334,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,1107919747813837078,5170935531693568334,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1740 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1068

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1672

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3120

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d34331aa91a21e127bbe68f55c4c1898c429d9d43545c3253d317ffb105aa24e
MD5 cbec32729772aa6c576e97df4fef48f5
SHA1 6ec173d5313f27ba1e46ad66c7bbe7c0a9767dba
SHA512 425b3638fed70da3bc16bba8b9878de528aca98669203f39473b931f487a614d3f66073b8c3d9bc2211e152b4bbdeceb2777001467954eec491f862912f3c7a0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 3619c3b82a8cbdce37bfd88b66d4fdfcd728a1112b05eb26998bea527d187932
MD5 279e783b0129b64a8529800a88fbf1ee
SHA1 204c62ec8cef8467e5729cad52adae293178744f
SHA512 32730d9124dd28c196bd4abcfd6a283a04553f3f6b050c057264bc883783d30d6602781137762e66e1f90847724d0e994bddf6e729de11a809f263f139023d3b
MD5 SHA1 SHA512

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018
Size 20KB
SHA256 e8914e720a0f88c352b4277f42cb4309bc3184c4847ff66eaae450a48cf07a9f
MD5 7495f57473662645a5b2fff9a05b72e8
SHA1 a9d94e4b2f43ab30df0378a3b656cdd23ce857b8
SHA512 75a70c662740227cc50c6ded947bf667f667ba28b57ffaeb133a3b37b261488ae6cfa688561d78308a13f09b544b78b4b471193c202b44b1b2e3b6f08963ef32
SSDEEP 384:uCRvYuTan6ogpAEq9Z9/KglNEvPm6rvcmek7xKsyeErgFjthjDpqy73ZiloHozrU:uwYeEP9Z5KXe6r0peaeE03hjDMyVQ+oE
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000019

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019
Size 44KB
SHA256 19b5e38ea10f052b4e709990c7bec4c7b97a4fb061f28bcb95b092b753d01d7d
MD5 c836019fecc97d15d849325875cabb0f
SHA1 ee5e11847241e6e8e4d4aab3131117a41c37ede1
SHA512 93c37c4236f9a5e9a096fbbe25d3a7e9977564d280f1afd175d0016c7334b92d994d32c91f2bbac87ce91843f2388e3048f46ebece7ed5db9d8aeecc681475d8
SSDEEP 768:MkE4AGEpG4kLw0JFZyemOvjra4QvXwsqbCj3h8W7ZH1/e9h1qBCPzSN+GMZUdpBr:MkETppG7T3ywrJ+ZqbUaAe9XPWUG8UNr
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 2b2b9bfb560dbd9f8190e698b621fc396c70877b8ccfd60e50e1ae41a767ed9b
MD5 49b00e9dc811b93580662fc1f6bbf914
SHA1 57c835c1c107b26335f29e54aec999469314fc31
SHA512 49d47c975e794fa3c3931ce9aec4133f4a22ea62c08500d16803fa7be4703013b967e380d80e08651312a9f39cd97bac1db7ac22df000c86558446274792c431
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 b66d05b26e046e405febe570d348472ed687cf5622ba73539eb916d7e9dd7ee3
MD5 5a7237e36f647427cf47c391f05a8cb2
SHA1 8db7c520cb70ebcfe450baaa67ad43affa6a189f
SHA512 e2c2898028d7811c70f7290d54e44377078842db5831771b2aed6381022936699aa8786a4fee2cf441bdac69f8ebdbe735ee290c1fd40150af05a496bc16e9bf
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 94a88a3aa93d935922b56008abd8c290cd80e0a5e4ec119f9469fb2608811980
MD5 5aa2b61c16fc8d7591139af0988bcc3e
SHA1 9247b67a788225423428e825a8c1c2da7a94815a
SHA512 e1852c84d2098c44b5adb677572ed6227fb8707cba825e8bb61e4055dc3b0afdd5868d490ff5ff17eea16e1b2b2ac87aad5dccc9c2a801512c140e96995ba489
SSDEEP 96:n6OkGKN18ymwpvWMoiVmdeHcmWmxsUWQyV+VD7ziEwb:n6Ok/NfmGWMXWssrt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 e120669d2bd4e27ccd370db4e865426ab7a077df3db11a074e9bff467d090225
MD5 4f37f57db96f00090c8e72f71ecf656f
SHA1 c34a974fb79bd8fe0538318cc8ef8c5ff44b8d8c
SHA512 93da137e8ae38d1e67152cde5944281bccc7d7b8b477f8cbc032b67c55e606ebcca5b32b378fc789babd367bb425218a58769bc3fc21c76668894982c2ebe95e
SSDEEP 96:n6Ok1KN18ymwpvWMoiVmde0LgHmztU43v4f2cfFWmxsUWQyV+VD7AiEwb:n6OkoNfmGWMELgHmztU43v4f2zssrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 7d6fc5593d170ac2e25b7a30f062d43abe57a77cf957d1b0e55400029d7bc8b8
MD5 0bc562799452ddb7b0248c344482337a
SHA1 99ae90a42b2403a983518f279edb5f842ccf9ec7
SHA512 cd288e0eb4d37ce94cfc13452cf5b0d399ea466dacc2dc2475a45a705856aba1fd6fb4a48ac8e58e6d4d1713de9c3400df3e91b4be0b99aac0fb589ef246fe45
SSDEEP 96:n6OkdKN18ymwpvWMoiVmde0LgHmztU43v4f2cmWmxsUWQyV+VD7AiEwb:n6OkQNfmGWMELgHmztU43v4f2Wssrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 2e2cf0f85b643d296cd8cb82122157d56633514e583db792ee3c58ea74d6af3e
MD5 8f3b0cfeb947524eeaa418a8c4cdc9ef
SHA1 c7b2be7660553be6f62ec2742a03810ff43d645f
SHA512 f4e9ad176e0d71ab43270643886a4643b13d6a1e3dbeaad3ebc6352cce6461abb43b9a91cdfec7e4fc29ea9752887da7d971ed2cc6ec965cab1906ccceba19e4
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup7Oge2RUMON+b9r39xUX1M1:A9iIxuERzA83h09RZxY7O+pO8r39E1M9
MD5 SHA1 SHA512 SSDEEP

Submit Download