a76fe63c649b46a961217b2bc126da0937d59d6a7be02280ca8b687237ec95e9

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
20/03/2024, 07:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d82c20469a5767c742d06cbee2e99d4f.html
Size 66KB
Sample240320-hsstcabb45
SHA256 a76fe63c649b46a961217b2bc126da0937d59d6a7be02280ca8b687237ec95e9
MD5 d82c20469a5767c742d06cbee2e99d4f
SHA1 2d5fa61b7cc67bf0063d4a31be7ca95e6bdce3a6
SHA512 5185f3ff9cdd962d92216d76d06e0f8d3c27c580cd1fdbaa67f574e2b0b49b23bc8046c581033a6d6a762c2beb492ef4196024fa478c5f0cfac847edbf73d9c8
SSDEEP 1536:e1Mk5hP2zn7EZOzSvurrGaeWsnoAfQ6U+iP4spa2f89rCX7CesY8seuftkGiz5D:uX5Nyn9f2pXiP5ppE9rCX7CeiseuftID
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2152	msedge.exe
2152	msedge.exe
2028	msedge.exe
2028	msedge.exe
6040	identity_helper.exe
6040	identity_helper.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2028 wrote to memory of 1932	2028	msedge.exe	88
PID 2028 wrote to memory of 1932	2028	msedge.exe	88
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 1784	2028	msedge.exe	89
PID 2028 wrote to memory of 2152	2028	msedge.exe	90
PID 2028 wrote to memory of 2152	2028	msedge.exe	90
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91
PID 2028 wrote to memory of 112	2028	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d82c20469a5767c742d06cbee2e99d4f.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffb30446f8,0x7fffb3044708,0x7fffb3044718
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3392 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4088 /prefetch:1
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:5884
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6028 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4076 /prefetch:1
  2⤵
  PID:5300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,8417060269113072849,2560173489393197867,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2700 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6112

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5036

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4268

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 05e80abd624454e5b860a08f40ddf33d672c3fed319aac180b7de5754bc07b71
MD5 f35bb0615bb9816f562b83304e456294
SHA1 1049e2bd3e1bbb4cea572467d7c4a96648659cb4
SHA512 db9100f3e324e74a9c58c7d9f50c25eaa4c6c4553c93bab9b80c6f7bef777db04111ebcd679f94015203b240fe9f4f371cae0d4290ec891a4173c746ff4b11c1
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1b53367e0041d54af89e7dd59733231f5da1393c551ed2b943c89166c0baca40
MD5 1eb86108cb8f5a956fdf48efbd5d06fe
SHA1 7b2b299f753798e4891df2d9cbf30f94b39ef924
SHA512 e2a661437688a4a01a6eb3b2bd7979ecf96b806f5a487d39354a7f0d44cb693a3b1c2cf6b1247b04e4106cc816105e982569572042bdddb3cd5bec23b4fce29d
MD5 SHA1 SHA512

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
Size 20KB
SHA256 c06d46be4ad99c02007ccdca23452f331179899855cbddd0051f76bf45010389
MD5 ac6b53d3a7ba7bcc24943757d2c4fc69
SHA1 5907e615ce12b6da5159b06d7e8144f3ce1792b5
SHA512 176c70d6865ebc0be4da339bf9d784914f24c8d29a7a5576b0b55fcfa66ee20d8323782499085cea44f9d70b2f718f0f1606728b147c7b0fb8e13e7684b11268
SSDEEP 384:uCRvYuTan6ogpAEq9Z9/KglNEvPm6rvcmek7xKsyeErgFjthjDpqy73ZiloHoz7e:uwYeEP9Z5KXe6r0peaeE03hjDMyVQ+ou
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009
Size 22KB
SHA256 b631fd3a2cedbe8626956c3f914a4b338372f77b38d7f477fb2a1a03873bc69d
MD5 30be678c3eeac810a11baebd8e7ca39d
SHA1 a7759bdbd6d81bda5addb7d297125faf8d162712
SHA512 150902c52cb87ae836bd6ecf64a7940f86d7971105b6baa1a9f28239d439028ae9f65b7b0a03e846eff8eec5b861f328f12e2dcb8e209a26d4dddb5074360ce1
SSDEEP 384:PBikE41o8qduTBE0QG4kLpm0J63LzJ7nk5InCQVLmkAiNjoNRbA2FyO:MkE4AGEpG4kLw0JEp7uBQ9mkBmbGO
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 0ce0fc2d7b4e6bbee3832625aa9b17c041a7005d491881357a3568cb7f53b04f
MD5 bed66bed21e6114f85310dd9b82eb802
SHA1 a104598f7f375ec64b29bcb5a8ad11a281d4a191
SHA512 27ecc665ec1535e1645e91bad759255d3958f8255c776e159d6594e0bb28afd93bda11a0f460fa85894ca28877981b6fe467e81fba0e678f1ee3146b5de87a54
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 d89aee938351366dbd73f7b444566d51ccbd3bc8e8f8b99b79b6c96c19ca77c7
MD5 adb9f2750af119c0e5921c2285a6b604
SHA1 31e8f3ce5aff5be5ce31b2305c2d83912697a8c9
SHA512 3415dd42fd5c9c5962dae508cf46fe099339d2ebb82e44b219c0b28f58a500f7c2112647a28fdee1e21002dd10f562cebea66b3b0d4f764fa17d9d355e219fc0
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 107d0cf6ca9a8694e2dc70aad913d7821989c94f9ba223d260934eeecfca6001
MD5 e7d681c4675500454ae763fa30dbb722
SHA1 6a2d2409c1fda0ceb9a7abc808961817a50da553
SHA512 e5019000c85338a75355759180b7cc0368eed817ccbfe0c37e773e64541cd8e57fc9ee981f73533235aeb878f529615debc04608db985fab12d5dbf7c8d455fd
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 5284a293e1a4571ca6ed6d17713c987791edd81ef9d26cea27bac0bb69ee59ff
MD5 2c675b015d9ed80a53566019b8298d5f
SHA1 a9eb15237b796f456b9a2a83983bf20ab26b2a2c
SHA512 662f6c23601d2d7e64411d13330d0009d18af720495cbbc6de5f949d3164c2c2098e1aefa62d0e9d0949142fda60800f39ffa01e59b5051a40579d7057b2d70d
SSDEEP 96:n6DkGKg1Z4SPwpvWMoiVmdeHKaOW0Ac9UWQyV+VD7ziEwb:n6Dk/gQSPGWMXZp7c9rt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 ca4e78e585c2c156aaac865dd9ef7a512f1f6b26b0864295f70b0f58a7a46a9a
MD5 ed72001579da148b90054c6ed5dae5e7
SHA1 c26e1a2fb16a2d46ce775234d830104260fcf19d
SHA512 6645027d3e47303623c07533a4bff9cb4497fa571f44aad2bec93af0d94a349550f42db23f4ba26e6160f58c522e1b56ab062f1caa966ac5403ab94375963448
SSDEEP 192:n6DkQgQEPGWMFtQkjo+6etXiAD9bgdDW3K2Zp7c9rg:n6DLgQlWKKUOsXZkZObp7cm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 1b223c24bc1a7e530798129ba33baa6967b21b22ca44ec826521d019aea28e4c
MD5 90a403d9c89efafbccf95587f6571de8
SHA1 896932d406cb07e2d21bc3b48ed2ea998e1bad67
SHA512 5aec96dbcf95292898af939ac03075584f61bf7aab96ef690eb57b797a6b29bba728d68dd110040563323d9e0608a10d53e4412d1ba60d48301d1b9eb16df9e0
SSDEEP 192:n6DkogkEPGWMFtQkjo+6etXiAD9bgdDW3K2Zp7c9rg:n6DvgklWKKUOsXZkZObp7cm
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 370B
SHA256 476599329d728a9202bae1fadea2175a128339c33495b020ce11b86b74579c26
MD5 879b0395c5c94424eb5d07ec687a3c6d
SHA1 fdc6072fac00fdb59582cd35f57f4d4eff4d54fa
SHA512 61ab9512882a2f2043f08563c23cc0442d7ef28f0e1478e17bad8c1edbfb7c58cc13bcaed55886bee8dd37e36b5de18df3e7c5fdae910a6e3e3049f743765840
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57ccf5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57ccf5.TMP
Size 370B
SHA256 88f472adf0e6a6403b6da2a78a702ebafb5eac1ebeb916293247a6674449e8d0
MD5 b16f10a57d09056dca6894ab98aa87cd
SHA1 1e0910e326401962eaad3f5170b17c562f46a74d
SHA512 20c320cda01137915e48d70d6b64f2743c2ab33769774b79d5bb60d44fdb15bd7d81c759f2db4cfe48a084cb7dd1f325469ba52a5621993a655a5eb90dc1974f
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 8a026fad681626288c20ab2d8250eb9072018cc292da28d36ac8c5f77af3a112
MD5 ecca7f5043aa69524193787ffa536ca4
SHA1 b5197a1b3250379a37cc7fbe2ed575152170e5c3
SHA512 164f6827fd37bf8d5a53112e4695eb9199c96c0457107ab3e550df368987dece141a6bf48ec1e08f4da2554103d199b77808314d45f37148b928ae862b0fc384
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupOhTUe2RUM+/KbErH9xUX1c:A9iIxuERzA83h09RZxY0ap+LrH9E1MeY
MD5 SHA1 SHA512 SSDEEP

Submit Download