Overview
overview
3Static
static
1netflixyap...min.js
windows7-x64
3netflixyap...min.js
windows10-2004-x64
3netflixyap...n.html
windows7-x64
3netflixyap...n.html
windows10-2004-x64
3netflixyap...x.html
windows7-x64
3netflixyap...x.html
windows10-2004-x64
3netflixyap...api.js
windows7-x64
3netflixyap...api.js
windows10-2004-x64
3netflixyap...ard.js
windows7-x64
3netflixyap...ard.js
windows10-2004-x64
3netflixyap...ook.js
windows7-x64
3netflixyap...ook.js
windows10-2004-x64
3netflixyap...min.js
windows7-x64
3netflixyap...min.js
windows10-2004-x64
3netflixyap...ing.js
windows7-x64
3netflixyap...ing.js
windows10-2004-x64
3netflixyap...gin.js
windows7-x64
3netflixyap...gin.js
windows10-2004-x64
3netflixyap...min.js
windows7-x64
3netflixyap...min.js
windows10-2004-x64
3netflixyap...d.html
windows7-x64
3netflixyap...d.html
windows10-2004-x64
3netflixyap...x.html
windows7-x64
3netflixyap...x.html
windows10-2004-x64
3netflixyap...n.html
windows7-x64
3netflixyap...n.html
windows10-2004-x64
3netflixyap...e.html
windows7-x64
3netflixyap...e.html
windows10-2004-x64
3netflixyap...y.html
windows7-x64
3netflixyap...y.html
windows10-2004-x64
3netflixyap...d.html
windows7-x64
3netflixyap...d.html
windows10-2004-x64
3Analysis
-
max time kernel
145s -
max time network
114s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
30-07-2024 12:37
Static task
static1
Behavioral task
behavioral1
Sample
netflixyapp.github.io-master/assets/js/script.min.js
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
netflixyapp.github.io-master/assets/js/script.min.js
Resource
win10v2004-20240729-en
Behavioral task
behavioral3
Sample
netflixyapp.github.io-master/fblogin.html
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
netflixyapp.github.io-master/fblogin.html
Resource
win10v2004-20240729-en
Behavioral task
behavioral5
Sample
netflixyapp.github.io-master/index.html
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
netflixyapp.github.io-master/index.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
netflixyapp.github.io-master/launcher/assets/js/api.js
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
netflixyapp.github.io-master/launcher/assets/js/api.js
Resource
win10v2004-20240729-en
Behavioral task
behavioral9
Sample
netflixyapp.github.io-master/launcher/assets/js/dashboard.js
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
netflixyapp.github.io-master/launcher/assets/js/dashboard.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
netflixyapp.github.io-master/launcher/assets/js/facebook.js
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
netflixyapp.github.io-master/launcher/assets/js/facebook.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
netflixyapp.github.io-master/launcher/assets/js/jquery-3.6.0.min.js
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
netflixyapp.github.io-master/launcher/assets/js/jquery-3.6.0.min.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
netflixyapp.github.io-master/launcher/assets/js/landing.js
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
netflixyapp.github.io-master/launcher/assets/js/landing.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
netflixyapp.github.io-master/launcher/assets/js/login.js
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
netflixyapp.github.io-master/launcher/assets/js/login.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
netflixyapp.github.io-master/launcher/assets/js/semantic.min.js
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
netflixyapp.github.io-master/launcher/assets/js/semantic.min.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
netflixyapp.github.io-master/launcher/dashboard.html
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
netflixyapp.github.io-master/launcher/dashboard.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
netflixyapp.github.io-master/launcher/index.html
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
netflixyapp.github.io-master/launcher/index.html
Resource
win10v2004-20240729-en
Behavioral task
behavioral25
Sample
netflixyapp.github.io-master/launcher/login.html
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
netflixyapp.github.io-master/launcher/login.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
netflixyapp.github.io-master/launcher/maintenance.html
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
netflixyapp.github.io-master/launcher/maintenance.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
netflixyapp.github.io-master/policy.html
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
netflixyapp.github.io-master/policy.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
netflixyapp.github.io-master/wiki_android.html
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
netflixyapp.github.io-master/wiki_android.html
Resource
win10v2004-20240709-en
General
-
Target
netflixyapp.github.io-master/launcher/login.html
-
Size
2KB
-
MD5
17af7b166f648e32006812dc53c0ff56
-
SHA1
1793fdda4e31e3b5fa32d2c7f5cfdaf29cb154a8
-
SHA256
73082ea7625bd30861c0f29a8c676d7065d720ac3fe24be084b81f330f692ef1
-
SHA512
36241c7a7075238d49ac2625bf33c5cdd4b745b92c944b83c1d5e9fe8b88dd2207898499ca73d3a08d9978bb38bd9df6a949aceb72cd2ab230312810899cce56
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
Processes:
msedge.exedescription ioc process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe -
Suspicious behavior: EnumeratesProcesses 10 IoCs
Processes:
msedge.exemsedge.exeidentity_helper.exemsedge.exepid process 2712 msedge.exe 2712 msedge.exe 2780 msedge.exe 2780 msedge.exe 1160 identity_helper.exe 1160 identity_helper.exe 2000 msedge.exe 2000 msedge.exe 2000 msedge.exe 2000 msedge.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
Processes:
msedge.exepid process 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe -
Suspicious use of FindShellTrayWindow 25 IoCs
Processes:
msedge.exepid process 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe -
Suspicious use of SendNotifyMessage 24 IoCs
Processes:
msedge.exepid process 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe 2780 msedge.exe -
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
msedge.exedescription pid process target process PID 2780 wrote to memory of 4508 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 4508 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 1100 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 2712 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 2712 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe PID 2780 wrote to memory of 5032 2780 msedge.exe msedge.exe
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\netflixyapp.github.io-master\launcher\login.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff3ad746f8,0x7fff3ad74708,0x7fff3ad747182⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,8339682303111972111,12509963944269025949,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:22⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,8339682303111972111,12509963944269025949,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,8339682303111972111,12509963944269025949,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2848 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,8339682303111972111,12509963944269025949,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,8339682303111972111,12509963944269025949,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,8339682303111972111,12509963944269025949,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,8339682303111972111,12509963944269025949,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5324 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,8339682303111972111,12509963944269025949,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5324 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,8339682303111972111,12509963944269025949,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,8339682303111972111,12509963944269025949,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,8339682303111972111,12509963944269025949,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,8339682303111972111,12509963944269025949,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,8339682303111972111,12509963944269025949,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1260 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD51f9d180c0bcf71b48e7bc8302f85c28f
SHA1ade94a8e51c446383dc0a45edf5aad5fa20edf3c
SHA256a17d56c41d524453a78e3f06e0d0b0081e79d090a4b75d0b693ddbc39f6f7fdc
SHA512282863df0e51288049587886ed37ad1cf5b6bfeed86454ea3b9f2bb7f0a1c591f3540c62712ebfcd6f1095e1977446dd5b13b904bb52b6d5c910a1efc208c785
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD560ead4145eb78b972baf6c6270ae6d72
SHA1e71f4507bea5b518d9ee9fb2d523c5a11adea842
SHA256b9e99e7387a915275e8fe4ac0b0c0cd330b4632814d5c9c446beb2755f1309a7
SHA5128cdbafd2783048f5f54f22e13f6ef890936d5b986b0bb3fa86d2420a5bfecf7bedc56f46e6d5f126eae79f492315843c134c441084b912296e269f384a73ccde
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-indexFilesize
216B
MD55c0d6d533906be44bb55689b21600589
SHA1541deba59d99c346cfab52802ee78a0a4a8f739d
SHA256a7eed1edbebd960b94f9ff8c66908f5f0526b2820330a1d8f8546440384f2432
SHA512b8eb35daecd44b7cb3220a331568b12cc8216a8307e3420f0abd3175a18bf71ef28b4a92a731cc5b0d46eddc5aaac48baf17d352b1736a0fac658c2eb90ac3c4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
262B
MD58c5bd48250406a0ca7eb2b3c75adb820
SHA1ffeacf3a1eb1e0549219b6428ec4af8c5054e060
SHA256a13323db9208c5d8edff0eab641bc5b9ef44044a8b4773b7e026661388089e1b
SHA512b58eebc062b32b6c526160393b9f8758024d09a9b14c0583f2252effb82bff52b83b48efdd10ff814c04bb417e93eedf5bb27d14c224681084ec64b27ae40f00
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
5KB
MD52600aed927bd50d5b74538fd2f5b26e4
SHA1c80cc0ffdb819ed2b47b65e70c1d7a3649b10c84
SHA2561f409d664e71b809d561cafa21909de9b42c3075e300fab9b9341fa205341504
SHA512c727f4d56907764c361929702757a905088446c50adaed60880f36b1aeb78ddd0ed1275c53b91aae70dc8f0eec635b4a65cbcbae738b1b2a09126e98efd7fae6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
6KB
MD53d988d1f5aeb9327a7946a219e45e343
SHA17e18406351cad05891c87454774a8bc15bf0f56f
SHA25651b349f2d839d57eb5b5df8d73453822a9d3b1c0690c6f391a90a1db4910742b
SHA5127140e745dfd210a10de7cfbed5dabdd7ef04661ef978c0cea127793fbd8fe1887860978ea524bdc32181898422e0ca06525f3e49ad8849ea6ec7a1cbce812ec0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENTFilesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENTFilesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
11KB
MD5c0306d1f5f216ee5442b9dc3de5f2bfd
SHA1dfd414cf2b3da94cd7c609779af1e3a108f326e0
SHA2560a709b58139444e1dbf801c4995802871f2a7adc971d639dcef9fba245394376
SHA51284d088847283ec4dde12a55ce8b0f1b1b1ca0de534d4a9c62304a75e2ba9ac642a5f35ed00b90a03510e266bc975956530656be77fd1c06caa50975780e21c23
-
\??\pipe\LOCAL\crashpad_2780_HBXJXUBHYAERFFPAMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e