4365e1bdfa8345d85396268b4ac86fe22e00740bfe700dafcf34ec7c191122ce

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
04/10/2024, 02:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 31KB
Sample241004-dc3amavbjg
SHA256 c41f3725c8c129d9c612a1718bb577753819c2bd150bbf5ca3ed9c71c73630f9
MD5 7a83c3c4c8f7848a24300e690480b8ed
SHA1 0d8c0a7551b26575c3d4506db01f947e83f839d9
SHA512 acf6b247821e06a2f9fe4bb83ac7526ca94e08c20af5a3d32c7dedd663484f802f9c9b89eada434ef44317567c83fc4221e258bf43dbafbba80430d3cc34e78e
SSDEEP 768:IRwpczfSpN9FUDpDSpzkEmE50Fsaygg0b3cJA:IRwczfSQ0rmE50Fjygg0b3cJA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1816	msedge.exe
1816	msedge.exe
3448	msedge.exe
3448	msedge.exe
4376	identity_helper.exe
4376	identity_helper.exe
2984	msedge.exe
2984	msedge.exe
2984	msedge.exe
2984	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3448 wrote to memory of 4584	3448	msedge.exe	82
PID 3448 wrote to memory of 4584	3448	msedge.exe	82
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 688	3448	msedge.exe	83
PID 3448 wrote to memory of 1816	3448	msedge.exe	84
PID 3448 wrote to memory of 1816	3448	msedge.exe	84
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85
PID 3448 wrote to memory of 1156	3448	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdea5446f8,0x7ffdea544708,0x7ffdea544718
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,14356262373556434445,4176116320418352971,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,14356262373556434445,4176116320418352971,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,14356262373556434445,4176116320418352971,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14356262373556434445,4176116320418352971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14356262373556434445,4176116320418352971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,14356262373556434445,4176116320418352971,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,14356262373556434445,4176116320418352971,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14356262373556434445,4176116320418352971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14356262373556434445,4176116320418352971,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14356262373556434445,4176116320418352971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3948 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14356262373556434445,4176116320418352971,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,14356262373556434445,4176116320418352971,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4852 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2984

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1372

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2276

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff
MD5 ab8ce148cb7d44f709fb1c460d03e1b0
SHA1 44d15744015155f3e74580c93317e12d2cc0f859
SHA512 f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b
MD5 38f59a47b777f2fc52088e96ffb2baaf
SHA1 267224482588b41a96d813f6d9e9d924867062db
SHA512 4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 632B
SHA256 238bb4f1eb90f1b0498d469e807030bc4000e95efc43c013cf7201255fd6af80
MD5 c53661ee87ee9d75557970515c73be99
SHA1 4356cda3203c5ee47071a9580cd3604ef632cac1
SHA512 0bade14c16fb3d943bf06d2a8cf0b3db5223ee64e3a8c6a52ce4449fdc37748115795426bed9a18641a90ace7d2bcbb24579092a89d6d9c3bcaeff35353af7a3
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 dab9a992a888bc1e1f0c9dec7023f9b26777252987bda26d16df9737ed2994e8
MD5 f5c22da81cea8d582017026a22a29270
SHA1 9d33e690f408fa67b12261448f288dec6af75b6d
SHA512 1dc94616e8d39e680b008b8ee476d9c010861f7ef659196bdbb12e3154c0bf38367af8ded4717a08efbee761de396078113bffb593d800eea4248a4433cdc236
SSDEEP 96:nUkRzm1I4dwpvWMoiVmdeHm9jcUWQyV+VDCziEwb:nUkRyLdGWMXOcro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 b1882ffcf24627fcb0e173a9892be9defc3bc12edcf27ab83ae57c8dd37b3597
MD5 79b23bf3153f5593b27306bbea780c84
SHA1 7389387eb89b7de567a78fdb504f1a422983e1c7
SHA512 0f9911eac3e49e72afeb9fde955a64e38dbc2677e45a07a353a16c52441d2893421350625c3a24e9bef1df2f28b16748bfa1ff8e048e77b0a579876e5391ecc8
SSDEEP 96:nUkRTm1I4jwpvWMoiVmdexXP+iercDh+y2m9jcUWQyV+VDCAiEwb:nUkRSLjGWMh/+ierWh+y2OcrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 3de1c33c7e503c4a0a25396483c0facdba2e9d86ee658758910cfada06c1d816
MD5 4a0c07a917c160bd667f6c04e11517e6
SHA1 9f531dc32731a8a201fe6e191ee6171bbd9098ae
SHA512 4dd7c003b0799108554719dcac3453ff911131f805479704aa82676787b0e42cd77a322b075104b31702ea186bab737bc5e7211514124d0745da60897f036805
SSDEEP 96:nUkRTm1I4dwpvWMoiVmdexXP+er2m9jcUWQyV+VDCAiEwb:nUkRSLdGWMh/+er2OcrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 539B
SHA256 8f03bbc805ee82213e81d86b12276745882a250ce061d14a07e2a50cffb42109
MD5 800887abfbf3037b9422e1b556a182be
SHA1 f4e5f247d45f99fe5e0da62ffc11ec2cd10607b0
SHA512 8a54d20c2f31049d7a9fbcaf08deccbd36f7169cc7de344567f0838709c390a0251437107b71d774f5eb6139cd64e3477125ca680bdde1cdef9db1c9a079b2e7
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 539B
SHA256 2ab2112189150a73ba19a976e0aa55e6dd41cf4613504d1a58860bc88ac3ead8
MD5 70e4a6647e252498698e60636394a9b7
SHA1 5334aeb7fa32e17fdc5fd15af9d87f74d9ef168a
SHA512 e9a703e41200a222f5ff3c1d489c23c351817d156aa2cdffd00e2544ff9113cbc2f941f74decc8b692c080bda86d59e0220dd46bf768b036bd3211f7fc6b4140
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 539B
SHA256 98e84dda57f802060516fbead59f0e9c2daff38335695649fdfe823f5109691d
MD5 59f95cbe20c88f961188cfce17d8b47e
SHA1 141599e5df8034e25b6dfce86839f945318e7b3e
SHA512 8d309e345c936147bd2c66c649ed4e635f556d4c877717d42e32cf50afeec92b9caeeb448a52d4879c0c0e301a1beb3f2bc4061a415d1cccd5380980241b988f
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe582f77.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe582f77.TMP
Size 539B
SHA256 4f19d497e0ec1354e9b71cf2f4fa4b9918dd0f6c35b3ea6ddea4bcd648b666a8
MD5 1b76a7941a0f9c54422015a995c6c772
SHA1 9ee294135949de6a83b733a9510807de6be5262d
SHA512 ef3b94fbb84aa908d44d13a7413ededcd1ef3a0ad410670ef3dd5f28edf5240f19575497919a97fe7afbdf2cab4b70f02b35ae6d7abc0526a6c06b113d2b001e
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 143557e8b03538b740e4f87d2442e7be579423114bd5d61ba8e12d18b7f64672
MD5 ddc1dba9a482ca59bac62d8f79dad089
SHA1 b9eb348d9ad0a960982f208402c4cc6e5e6d396f
SHA512 fb82aeaa617401c3ea6c8374116488d1973c4834a3b7203f9e4c130a3503b4e2e5481c9c4dba8f69ddbf52a156881716a42d23e250cbe5bc0ae6685af99a04d8
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupXe2RU9lYO+IcM/bo5Zxc:A9iIxuERzA83h09RZxYfeXqZxc
MD5 SHA1 SHA512 SSDEEP

Submit Download