628823aab40e49c0af2684cb25db9ca16b9d8b9400194b28d6b01be2d238bba7

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
03/04/2024, 03:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9f199bf6e157bef126add63783903eeb_JaffaCakes118.html
Size 122KB
Sample240403-d68z9sfc46
SHA256 628823aab40e49c0af2684cb25db9ca16b9d8b9400194b28d6b01be2d238bba7
MD5 9f199bf6e157bef126add63783903eeb
SHA1 64106e2d65ea6941e1a0883c3d231878dc69967c
SHA512 4056577fd85236331c0fae5bd0453baa95d55828bfca9de9a2a4f9255e9d437b3e7e8ab5503223df50568ece29ee0448205c562710da29bdcccf7a23754843ba
SSDEEP 3072:pU9CWDxYxQ2PDxYxC2T/Z1stoEZNySefhENE/jzCqezqF3yO:pU91DxYxQ2PDxYxC2T/Zp1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5720	msedge.exe
5720	msedge.exe
4560	msedge.exe
4560	msedge.exe
2452	identity_helper.exe
2452	identity_helper.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4560 wrote to memory of 5428	4560	msedge.exe	85
PID 4560 wrote to memory of 5428	4560	msedge.exe	85
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5080	4560	msedge.exe	86
PID 4560 wrote to memory of 5720	4560	msedge.exe	87
PID 4560 wrote to memory of 5720	4560	msedge.exe	87
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88
PID 4560 wrote to memory of 5716	4560	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9f199bf6e157bef126add63783903eeb_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe08dc46f8,0x7ffe08dc4708,0x7ffe08dc4718
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4960 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2060 /prefetch:1
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,5424053844079989796,14923406668687751765,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2944 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4336

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4644

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1388

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 47a22bea2e7d0154c59bf5d8790ec68274eb05e9fa6cf0eab0d648121f1a02ac
MD5 47b2c6613360b818825d076d14c051f7
SHA1 7df7304568313a06540f490bf3305cb89bc03e5c
SHA512 08d2366fc1ce87dbe96b9bf997e4c59c9206fcfea47c1f17b01e79aeb0580f25cac5c7349bb453a50775b2743053446653f4129f835f81f4a8547ca392557aac
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c91388c87878a9e2c530c6096dbdd993b0a26fefe8ad797e0133547225032d6c
MD5 e0811105475d528ab174dfdb69f935f3
SHA1 dd9689f0f70a07b4e6fb29607e42d2d5faf1f516
SHA512 8374a721ea3ff3a1ea70d8a074e5c193dbba27ba7e301f19cea89d648b2378c376e48310c33fe81078cd40b1863daec935e8ac22e8e3878dc3a5bb529d028852
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 67be70bba9dda40c5c9d0b597fdb8e3310a3ca30c9add8b209b59872b36cca15
MD5 68bbcfc3c559b53c963776732151e1ab
SHA1 98039e7766fb20dbc2faa2b07a77b68dee706e2e
SHA512 c2fc168dc43b7ae8cf3b1b8e4a93a76ff3df0788292ff66a8605901e2c437fd6c316f0b6a5f8339a77164893ba9f545b6ab6e83c52ec9e494f18ecffaef4c865
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 e360ddf95067e0011969a8352be171a166d1b89f0b46ea28353f868ba93219c9
MD5 3863317a0103808ed590f0bc65991875
SHA1 af9e3cb4f0ba5c072b09922e7e3318a07e30d101
SHA512 582511f0c791b06020b54228d5ffba88af6138e85b573fc57b51b8711a8db2b7e594fd422da84f303dbd47708003422f8cc943db3211f77ae87dda1dd6cc7aca
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 82e32ee021078914150110d40833180eab9036c30c1f0b838d536b750a01dc65
MD5 03e64c7a7bee100fb086c458374df2c6
SHA1 c73ff2395da7782c68fab6a3301539d2c616a6c6
SHA512 d124edbf2a45a19c27d77445513adafa112c4d13cff0fa3370664c2424b9437d495d70073eaf789cd81303b8842e9f179bc3dd163007eb3933e31e6df4751143
SSDEEP 96:nfkt81nUwpvWMoiVmdeH0QUYOUWQyV+VD7ziEwb:nfkWFUGWMXuYOrt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 ff9e57ec52db15caf809006b4b6bc3f47deeb8d216eb7233d1f1dba7d854c49a
MD5 9bed7bc4fb480d383697bb1abc5dda5d
SHA1 f5f5d89499ad280ca7e334ecec0d8a12c34dead8
SHA512 7e455865c2b5cfd2027e190666594c822cd64f9b9ee6e80123cdf58f1716c635393c690e357a534ebaf95c72c80d08f2665ebdc0643757e66593b1f77d4daa48
SSDEEP 96:nfko81n2wpvWMoiVmdeoUmkdqVp5ylMngOyN20QUYOUWQyV+VD7AiEwb:nfk5F2GWMYUmkdqj5ylMgOyN2uYOrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 203B
SHA256 07c53eb4e14c87c652a9d477d9d9b2b8248dcd6323440e77b9fb8cd153b99d62
MD5 d6eb60393ae61e781a87f1042c2de425
SHA1 28b5d429ff2ff62250984765bdaeb14f1edf6efd
SHA512 c853ac7209ff4b27a5d25baab3a24b8c71a3718499f581028320e4f8eed077dc69e2c177ac9b21824f59483e1a693e8a2bbcd76b29925bcb9d7090e9522b43ab
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57bbed.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57bbed.TMP
Size 203B
SHA256 08f70af97cddb6c3451a709c06b82aa6cb10f6cd68fd8f195e6941a51286ba7d
MD5 a7a9849bda89724f3e5e0913254dbbc7
SHA1 cc04bb363a80923b15f79c309d2ebe719160ff4e
SHA512 5e1b54a6dddcc29ddb271925ba1fead39b12f53c0798ab37ce1c4ee3a616f215de5243a077c9298c0f696fe0d66c1e97a128dc8ccef1075e08fc4a03e48167e0
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 85b6eb51a5dfcde3d2d0347132b25be36b8d032eaa17d2f5cfbee66afc246c9c
MD5 c0fd5b76231b2d4d5c0655854ef2173d
SHA1 fab1f2f2bb02e29ff0110bf5dec2fe6dc48ebd2b
SHA512 36dcaae2739c57928b81f62a2add5e5a76c6c4bcf0940007a1ac8382c4864e4f1e9d4e2663f8cee0bf37e321036c6fb38ff5cf0362bf206f49c32a694c6e5683
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup8Y0ce2RUHZxbXLYznIYWLA:A9iIxuERzA83h09RZxYQCQXLYzIDG8i
MD5 SHA1 SHA512 SSDEEP

Submit Download