69bebea1827a8932836e41b5c9e59a1eb79397b007c13d2d3d943bc8014042e6

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
02/05/2024, 04:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0d758f80627e9a783af9656524f90e60_JaffaCakes118.html
Size 235KB
Sample240502-er63ssae94
SHA256 69bebea1827a8932836e41b5c9e59a1eb79397b007c13d2d3d943bc8014042e6
MD5 0d758f80627e9a783af9656524f90e60
SHA1 9713896a29924f8f67e21e0d38f101b646cbac9e
SHA512 40eb4ed432e570f802834b7ad8d9f8a91bc7260c0b25c5a74b0b491f962e32a7abe276b1e97d559c8125480f94d3f856b4fc8e3f1da9237476a1617561a5c83c
SSDEEP 6144:5+RELVzhXkA3d8VZQvzwV2lms5JBpknvjXGXgcH1JQNKQh:IRELVzhXkAN8VZQLfh5JBpknvjXGXgca
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
1968	msedge.exe
1968	msedge.exe
4468	msedge.exe
4468	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4468 wrote to memory of 3908	4468	msedge.exe	83
PID 4468 wrote to memory of 3908	4468	msedge.exe	83
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 2460	4468	msedge.exe	84
PID 4468 wrote to memory of 1968	4468	msedge.exe	85
PID 4468 wrote to memory of 1968	4468	msedge.exe	85
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86
PID 4468 wrote to memory of 556	4468	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0d758f80627e9a783af9656524f90e60_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8355b46f8,0x7ff8355b4708,0x7ff8355b4718
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,1187731583944979182,5973404605533840402,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2012,1187731583944979182,5973404605533840402,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2012,1187731583944979182,5973404605533840402,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:8
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,1187731583944979182,5973404605533840402,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,1187731583944979182,5973404605533840402,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,1187731583944979182,5973404605533840402,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2160 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,1187731583944979182,5973404605533840402,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2644 /prefetch:1
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,1187731583944979182,5973404605533840402,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,1187731583944979182,5973404605533840402,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,1187731583944979182,5973404605533840402,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4640 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1160

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1860

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2276

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 f9ff4871fc5317299de907489d466e630be63d698c8f7cb77cc81faddbecc6d2
MD5 8b2290ca03b4ca5fe52d82550c7e7d69
SHA1 20583a7851a906444204ce8ba4fa51153e6cd494
SHA512 704ec8122cc1c263dff67ddbb5c20ee0db8a438674d716bc3be5b266ee5629a219b0049d721f9eb2dd8f2d8fda0163659eaa4d3e1f0a6e9072a8ffb92bb2b25d
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 17cd6de97a0c020cb4935739cfef4ec4e074e8d127ac4c531b6dc496580c8141
MD5 919c29d42fb6034fee2f5de14d573c63
SHA1 24a2e1042347b3853344157239bde3ed699047a8
SHA512 bb7eadd087bbcec8b1b8a49b102b454333f2f9708d36b6ffc3c82fdc52e46873398d967238c3bfe9ac6caef45b017a5fe3938ebf5f3053e4ef9be7b2752b563d
MD5 SHA1 SHA512

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
Size 44KB
SHA256 1b1f0b5ef5f21d5742d84f331def7116323365c3dd4aec096a55763e310879d8
MD5 88477d32f888c2b8a3f3d98deb460b3d
SHA1 1fae9ac6c1082fc0426aebe4e683eea9b4ba898c
SHA512 e0c0588ff27a989cac47797e5a8044983d0b3c75c44416c5f977e0e93e9d3a9321b9283ea077e6dcad0619ac960ee45fe8570f1d5cc7d5d4117fee4f2f0c96b3
SSDEEP 768:zznaC0S3xL3KmGLYSKhxDefA2ihGqfz9fNfh0QqdgDnqQpvSjCQNs9f9wAcCGI:PnajS3x3K1JKPCwhLfZdh0Qq6dQNef9x
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 42d4d5ef14e880decd998f2866bf122059d7e3177e6e588abb31a8c18a430f4d
MD5 3113d5c25e4b0e19232357d28d0ec3ae
SHA1 7fed60897e13d72b81bcf8f48a310ab745979ee6
SHA512 82328ae1b6a9351ae5566d6853565ba833b280cb4efa0cb8f0a6b5c8b8b0dd9708f76498e2486f1362187fdd136aab6a88317c22e87dc38a99e4aae1d9c5e42d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 115e1dbe094a7d2559071eebb9024b88cad852e4b8b32960b602b9c727c8de64
MD5 f8e04f00b6c8eaca18b7f02de1255c14
SHA1 182549afcc2d5f7216318f88928a1aeb2a77c3a6
SHA512 0adcdf7811773ada4b2529d5e40a9ab785333fe5aecc409ce0fb74ba7c0e6066e75db879c14e1f8479943cd72336da5e1b89982a3fb5adda83555991c184a2c6
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 f875c708b6c16d489037bbaf6cb36fcce5d05a8bc3d5bcd6cc1a3fb18b572067
MD5 2a1032843e1d27af7e1211ee067295e4
SHA1 60ae9a41c7032128571507293e51f6589497bde5
SHA512 9f83aca843d3791a7f7316a8001bc80054399ddaf4285156e27fecd6f74490e2c6871c801dc9fc764971db167a93f7e86f6942e2ea5d17d190f860f28957527e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 bc1d9e323d8f4b6fd95cb8de5e2425b743a8a6b1af58462926a8d9a454b18674
MD5 c65354f0c9262fa0dbbf297e22fbd7ad
SHA1 d87505bb29e3f2d0baee5c4fda00c6b975bee7b3
SHA512 4e82e818f5e0fa62d1b19f560f493a0f97835dd825fe4a325fa2be2d65b3607e44c557c7a5ce0ab4b39506d3575e0c3084417320dc865c2c723be57ee4201d8e
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 b2ba1b4a05b12b72e788144f9c19202ddf2b1a4359c2f1e340f7c65331705e59
MD5 876d03a881f0f145e9889158f642eee8
SHA1 e6d3e4154f8806e651eccadb47c3cfb704d7e15c
SHA512 7ed1e29211925ab581e11e258048be469834e0d6b42aec5e74a96f7acc16b525a2afd4c9b0dd3f8fd5ceca2971eec238319c70faa5fe161f29180bba9d551273
SSDEEP 96:nDkS71EYX12wpvWMoiVmdelfs2uwuEhjUWQyV+VDCAiEwb:nDkEHoGWMVfs2FthjrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 37324bda8f28f4f481bbf642bfcf24359acee749ccdefda8f65aa987298de53a
MD5 a14e8901b085e9993eb0a52a01614193
SHA1 ccb7cb95b535ba7c3e3d4a01350b3b0552cb05da
SHA512 fab55b6779371196d06c59455bc1efdb467c7faa0f3fd2134f5b6e968fd39ef8fe15075bb76f8ac7c735b945581f3f0e9ce7524c06c5ad30102e728fdb6e6132
SSDEEP 96:nDkb71EYX12wpvWMoiVmdeHuwuEhjUWQyV+VDCziEwb:nDkHHoGWMXFthjro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 bffa0974b9441d01deb94fdfbdda36b3879da887fbabc9dea42966cf7297877c
MD5 64508f84ec9531781802120b9c2518bd
SHA1 677207027d1e2be258144b39389c5db6b6b038b3
SHA512 8eef24bf03e47ed5ed79f41faabf94cbb9acca8cb541d5ce6fbd9cb4700f19ec7998ac5df2811eeb44cc15c973f3f26a9437aeaccae3ebde64357e8de199b84a
SSDEEP 96:nDkS71EY/12wpvWMoiVmde3+2VlYDLs2uw8EhjUWQyV+VDCAiEwb:nDkEHgGWMH+2vYDLs2FPhjrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 203B
SHA256 d8770543e935b6de4f3d05d733989ccd733987bbc0281c69567ab87ae800bcb7
MD5 38fa1a7ea2616fc9c54157b6023c25ca
SHA1 5657c45c8e0413c779fa6de17814a89d12651161
SHA512 d88a086b3af4402863cf1f329330202ece41489eebcbef55789dab49c52ec5d53ef49d45d13da56a2c164abddf3f42bac1e494683418ce117cfc446d3c918fdc
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe586685.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe586685.TMP
Size 203B
SHA256 a78208b4dcfa84f9bbd521591fb254376a5433edb77ab2cbbd40134aaaa7a1b6
MD5 b41b0a4dd3688a5bbfaad69063d8cb32
SHA1 a5825eb6d94f9f8b7ad8ac9f75a29174a26efe15
SHA512 19c6f849088e5a4a531b53fa45510461de7cbb89e6ee62597e26f9f754aad1e5675c6a861d7efe9d0acfb2d404c9e7117c5ee562332a216da14295c779f2f651
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 002f4cdb6ebc55db1bc617c7d0e48a23e0deee93c4154888f756cc9f2606b6dd
MD5 5327b722e0b6f97a81136d9a188337ba
SHA1 bef4d1822b54bed9266a72cf2185f58258946d19
SHA512 64ded620f2b7da928c580e2af120fb90f328dca4777627cf1a196ce14efa207e1d65f6aa6e6754435fbbd7025cb503536b260c489acc5080bfd13df7eda8dfd5
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupme75e2RUNIzx+OblfBhDaN:A9iIxuERzA83h09RZxYme7tRx/XDafEc
MD5 SHA1 SHA512 SSDEEP

Submit Download