1aab91f5e90e8f9bc8a39402c5fc3c3b3bcdbf1b2bedb72e795668d027d35d80

Analysis

max time kernel
146s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 07:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9103a1352f02b834bb2c8c8e1e5822bc_JaffaCakes118.html
Size 56KB
Sample240603-jp4bcage31
SHA256 1aab91f5e90e8f9bc8a39402c5fc3c3b3bcdbf1b2bedb72e795668d027d35d80
MD5 9103a1352f02b834bb2c8c8e1e5822bc
SHA1 ae223d28180a1b02b5b124b4a1ad4dd328e2613e
SHA512 88bb9aa76cc3397ec6dc0d2a1d87ec1ab03b5fc5cdf191c5be211148d2e40601a633c120b50924913a31a6eabc196716ffc8317cd3ea4850b91ceeb7dfc6ce9f
SSDEEP 1536:Najt3JFduII4HHITyMaldtMwa3rqCIZwIyY:oBHHITyMaldtMwa3eCKwY
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3412	msedge.exe
3412	msedge.exe
4660	msedge.exe
4660	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
3444	identity_helper.exe
3444	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4660 wrote to memory of 4164	4660	msedge.exe	85
PID 4660 wrote to memory of 4164	4660	msedge.exe	85
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 312	4660	msedge.exe	86
PID 4660 wrote to memory of 3412	4660	msedge.exe	87
PID 4660 wrote to memory of 3412	4660	msedge.exe	87
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88
PID 4660 wrote to memory of 544	4660	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9103a1352f02b834bb2c8c8e1e5822bc_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9b7db46f8,0x7ff9b7db4708,0x7ff9b7db4718
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,4144206659996262159,5855094976212101423,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,4144206659996262159,5855094976212101423,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,4144206659996262159,5855094976212101423,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2848 /prefetch:8
  2⤵
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,4144206659996262159,5855094976212101423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,4144206659996262159,5855094976212101423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,4144206659996262159,5855094976212101423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,4144206659996262159,5855094976212101423,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1788 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,4144206659996262159,5855094976212101423,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5576 /prefetch:8
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,4144206659996262159,5855094976212101423,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5576 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,4144206659996262159,5855094976212101423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,4144206659996262159,5855094976212101423,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,4144206659996262159,5855094976212101423,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4052 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,4144206659996262159,5855094976212101423,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2640 /prefetch:1
  2⤵
  PID:1360

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4244

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4632

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa
MD5 ce4c898f8fc7601e2fbc252fdadb5115
SHA1 01bf06badc5da353e539c7c07527d30dccc55a91
SHA512 80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1
MD5 4158365912175436289496136e7912c2
SHA1 813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59
SHA512 74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 b05dc2d35321c0466d3da4ff61339e4027776038b9c5fac600f70ab4561e7eb2
MD5 5942a53c13d0a3115e07bdeb481494c4
SHA1 3571bbe99f3f19b96d0408f7904dc266dc69eb98
SHA512 35147fbf455371945b73c93f8565f6a9a04b5aaf470981109684702baff970bde9eb036727448bbc79094093f846d2191f7541f16b2b6ebcf69c3672fbe52f08
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 763B
SHA256 50489dbfc987ddce0a1e7655817e7a537c616177346e74d62e0e47b469206ed3
MD5 c97e1cef2af6956f7330745cfb3d7d23
SHA1 a23b6de2bd8c119d50024fd06619087749bf53c0
SHA512 cf45bd1313d1bbd5988b48ef9d3e3c89f6fc7c771a5165aa54d4a186579f3076f7380d8c0011a0f85df28bb53b5562c54a75c5d949f4b68f3ccabf1042b38c8e
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 620def4b5600bb4cad115e1071f83bb5be3de6abab4e3c0e3bfb2f35612fd740
MD5 00d5a9e281fe4c24e4ead00ad7d7a5f0
SHA1 35a1f3c714089f8414960bab034d010a66a70c44
SHA512 33d6b0899ee0684d196650948af8ce5e55207f50c1e0414cb2d17143882174b9c94e64c694a724bbee3aba82452bab142004da98814fded7f21d6e664ef201a4
SSDEEP 96:ndkv91R4juwpvWMoiVmdeHvSS7qwUWQyV+VDCziEwb:ndkF34juGWMXEwro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 b4c1c0f3dc99f9931e054bc59c8d6e3c09ec0604257c0dacc4f91259821a59af
MD5 008cbff593d3ea4020cb49e27a7236e9
SHA1 0ba6e653dc81f20ebc08a2a26b012ed7a71d3b86
SHA512 2b5ab199504b087152ada3d7473613943a0c18113c4072dcbbdaf53f4c3d8dda5ca071ee954778935fc357191bf8e04af88021053e7a7724ffca585dce8a7302
SSDEEP 96:ndkG91R4juwpvWMoiVmde02vSS7qwUWQyV+VDCAiEwb:ndkW34juGWMk2EwrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 3e832c99a997d1e467cfba1e733424b71de2037c8d16c7f2c0babdd50c2f991c
MD5 21b6aeae301ac0cdb87b1666611dfae7
SHA1 dff9629f5d8966cd77bfacd3056db8c9ce2a94c9
SHA512 830cacaaf7e547d838cc02e9a3232854ae80dfa4a28314c14415fc49c7206c09bd5bcec0712e7dcd8b909d21bb04aa08d500ca1f1bee5bc24999fc7fad80bde0
SSDEEP 96:ndkG91RojuwpvWMoiVmde02vSS7qwUWQyV+VDCAiEwb:ndkW3ojuGWMk2EwrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 705B
SHA256 f3a83c3ba2a510fa671866fd4b4d470a2e818e7d772dd3c6c783be1799c20158
MD5 b839bb899b3fb3c0fb60254e45af74c7
SHA1 26fa6ebd162e69cb1f0f4e9e909d7728d39015fc
SHA512 dee7e137752d17f839a819bb0a07de8a2041cb1718bd59b548526196397e28ba98f86595a2aab54782b1ae2f5de0d54f8f14a9af9d311ceb0ee07d8aa75bed29
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 705B
SHA256 d643e808b6ac3c31430805675d8669e834439539c32db5f1394bb56432b1d629
MD5 27b072c8c244f671f47006fb132e172b
SHA1 953e3436e8a05b03136055640a422f802914e0ec
SHA512 83a64404bf771d001bffec964f043a14c156ab5b70a70b01fd4a2d4db97760423fdfa4a3c10f7df46a307d7f6aba9ff770e7ad121cd69e6a62475cd71148a560
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57cf08.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57cf08.TMP
Size 538B
SHA256 1dcefa934717da2a6480127dd74b88454ca0ec1633d2fe88eebef5ff815ba334
MD5 f10bb1eb1ae4343d57a2f961a90ce8c1
SHA1 8c27b43d2597cb768afcff910a837663e0798299
SHA512 c95841d9ff987cfaf4c573bb5385107687e290e561263fa99ff08b553846a56efa55528c6242149ff53862c850654dd28de824944698813e28e5f50bfd569038
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 0b8ea09c7038705ab65ad6e849372dc5bbed933f44a569b4cc883341bda971a4
MD5 aaa75dd1372534181622476d4fbe6cde
SHA1 4fd885a4f9c0085b94f8be37a56298f0401d6c41
SHA512 8c3d157a2ec86bf215bf6d9def8b2a35963d3db5c87e726dc65da0120ffb70fa6d5f38b168bb2ed3e6ea9e12c59d293b79b5b757d31405789d44e0dbe8d05d84
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupyZe2RUb4uPM3z2OMDCRHqL:A9iIxuERzA83h09RZxYyNSPMaOMWRHqL
MD5 SHA1 SHA512 SSDEEP

Submit Download