5c17efb399ce6620ff598905841dda95bf19ab9a5e7cf5faab2d8402e2fa32b0

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19/08/2024, 06:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5c17efb399ce6620ff598905841dda95bf19ab9a5e7cf5faab2d8402e2fa32b0.html
Size 368KB
Sample240819-hblnpsygmc
SHA256 5c17efb399ce6620ff598905841dda95bf19ab9a5e7cf5faab2d8402e2fa32b0
MD5 a9f3189be104c7109ca83ab1370dad30
SHA1 232e09b726a7584f813b8c03a9347f9d860de5b6
SHA512 b4859b8329032123f59fb312d3a378f426451ce2a970186a9a4bc702f4ac985aacd5693c55d7136853dea4aa41f6d70c7978a6b995112540c56e8824cad3831a
SSDEEP 3072:neWKJzFBAXodxhKIagxdS+r+X7+P+7+D+mx++Yhutcmk2nmNdKoBwKPxUodxh0+e:netJQIage+r+r+P+7+D+GZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
4316	msedge.exe
4316	msedge.exe
3944	identity_helper.exe
3944	identity_helper.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4316 wrote to memory of 2012	4316	msedge.exe	84
PID 4316 wrote to memory of 2012	4316	msedge.exe	84
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 1960	4316	msedge.exe	85
PID 4316 wrote to memory of 3452	4316	msedge.exe	86
PID 4316 wrote to memory of 3452	4316	msedge.exe	86
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87
PID 4316 wrote to memory of 924	4316	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\5c17efb399ce6620ff598905841dda95bf19ab9a5e7cf5faab2d8402e2fa32b0.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdbe2446f8,0x7ffdbe244708,0x7ffdbe244718
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2828 /prefetch:8
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2244 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6644 /prefetch:1
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7008 /prefetch:8
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7008 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6288 /prefetch:1
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6292 /prefetch:1
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,2427012628382862920,12364376560613234863,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6856 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2300

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1312

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1204

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da
MD5 9b008261dda31857d68792b46af6dd6d
SHA1 e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3
SHA512 78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222
MD5 0446fcdd21b016db1f468971fb82a488
SHA1 726b91562bb75f80981f381e3c69d7d832c87c9d
SHA512 1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 af0c0dd38fc7b98e63e6e4e4e5fb19891b87f5a54b324226952cc1ed85ce6ea4
MD5 80f5c69c6fa6ebca58bea59012ed9e62
SHA1 16846532cfd01eb01dc6f06f1a1c965be7f36f59
SHA512 dc6144b7301cf4dbbe3fc4a7d867859be85ef49486fa5ebba12d0b3e83dda7a73ac22bcf7df8c9add66b332b42e5204fe9f98e27e33212b255bdd5e94ea325b3
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 642933a44db47e23c66bd1e78682838f4e3db19e9484b06879dac9c46039a000
MD5 0fd402af2f3f4dced57ca6f9f679f174
SHA1 aac112b6b0f5ce8c9474083cc802e5e4ca13f071
SHA512 cb1447c518eee66810dc33b8eb2aef4c4401cfa93cffff006108fcf13716640d35cd6e07fc5531d39e9da2483c14f287dfa39c8c6cb6790a2244f31f55a81c8a
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 32f237028f28c04b56218a0d803001b637c13cc7e9097848d63e2dd4f031fec2
MD5 b521e9be8a0c5eb45fcf0f5f3d256e49
SHA1 f624dab33793220e0f4c2ff4935801897df072d3
SHA512 2e836c79756012d8c7e7e428ea4c0995f3a4f97855f6bbcc0ee4a5ccf33f826cdc15c64a26aac623b913050b9d221b0d8e7e241043c815744d29513108cdd834
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 4KB
SHA256 695f9b0b7a608ba66e72bd25d320ec9c5f7669b562f80b6cbb9eaf2f3d4248bb
MD5 efab4c1fe5cca8005f61126804050b8a
SHA1 5b74ba3a2f22b8bc3449ec04247c7a203203bfdb
SHA512 18e713d6be0d94d5d837c29d6c9354d632c36420affa7c27f03fe8d676918b55db6cb0f9e9be06e3021f069a01226ccdd182d6dc8a33fc6bb081ef3d8763d948
SSDEEP 96:Jgk/TC4ntKPXDG9LZrTZG3GeGot7PPkPKGd0GdMLEyZGfGy1GUJbfi:Jgk/TC4ntKXDG9LZrV2TLt7PPkPKNskz
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 d639025754d1ab4655071f15bda89935cb77794ca22b90d113e8a3a1af26085a
MD5 17728f423cbf6da3ef5e9184d2f8a7c9
SHA1 ee4895ac580166a9996fbd4b70e28a5d211d7688
SHA512 ab3844081d98a09e3b4110748dfd6981c42a1016f5e1e455d2e2e7a2ca23fb4a317afbed3bd8ebc83511c0c4c7639110ff0fc6caf3af8f4185a8fa97c339d626
SSDEEP 96:nYkRoV1SgdwpvWMoiVmdeH/ddWUWQyV+VDCziEwb:nYkRU0WGWMX1Yro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 1352d98abe12577174c16462d64096476420b11f7790f450314474410f9d875c
MD5 38a9a324b35635e7f69984a0ca3b9f91
SHA1 fdcc31d4df8b9e540a5047e092115ec27fad83f5
SHA512 af331980dc569d9976c9dcbe05bd616bb324ccdca4a19a488b6865d6ca0634c1c8ba269671402497a126648bb402c2e74eb2e57d62801a6a735b976a57bd042f
SSDEEP 192:nYkRq0WGWMy1keGINk107sf5sb778tE3TfqctTaY57Xc21YrV:nYV0nWf4SO5Defl3U
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9750acdbdb22fc51e78fbd670228127eb9f0328e1b53dbbdd8e0aae5ca02937e
MD5 eef800289d7155e39cdc014796a97ca0
SHA1 cf1fafa393c23a2e6fb2b16c4650f536b3fb7b92
SHA512 52867bf10066716c521e0a2d8b164fca69859bcf967663196cdca1df41fd4cc5507bb53d6d34fb69518e20ed17bb2ea2930e53d04ff3d7dc46171176d0f82b78
SSDEEP 192:nYkR+QWGWM5H1keefiiGINkM507sskf5sJXJ778tE3QdPfqctTaY5Ac7FB7XHc20:nYhQnWmvpK5nPfl3k
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 e727fbe22dd2e71a891eb17836606be7c17418b22f4890d9d73d29a5c5c27e30
MD5 270b806301296da9e7f3c4e2e58244d3
SHA1 867702a5be9691c48fe599b678da0e02656f13be
SHA512 c4a32616a7a287677f8d8f02565911fdbf14056d65b65c211252bbacd6633b51a783a802679b7cd3e152fc0494461e56af87abc861fa1de59ef2fb2d084babfe
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup5qe2RUL/23Ibru8z8ZJb/O:A9iIxuERzA83h09RZxY2GeYbPz8T/O
MD5 SHA1 SHA512 SSDEEP

Submit Download