7517673c31eebe167e21cd7a3249851b53b72dbb8ce0211eb48785a1f861dc75

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 09:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9150b7bd814a87dee13492282f727180_JaffaCakes118.html
Size 353KB
Sample240603-lpgtfsbf65
SHA256 7517673c31eebe167e21cd7a3249851b53b72dbb8ce0211eb48785a1f861dc75
MD5 9150b7bd814a87dee13492282f727180
SHA1 76d1409a380d7d36240dc786cefdaa9ce97ca46e
SHA512 04fc6412f0c424d977598758dea8b00690bd51e53bfe54c7db1d97553061ba6b69dcb934e0b1592d3bc37cfbabafaeef4f8089423162e0efb7ca2d7a052e2066
SSDEEP 3072:Qp8JPaPLkqxqd853gr6JwawzdKSGa6I72VEKpYtAgOlMccGxOCARWGdCm+8dCrhh:KgX49u2qZZL8Nck8Eh2oh
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3524	msedge.exe
3524	msedge.exe
4296	msedge.exe
4296	msedge.exe
4848	identity_helper.exe
4848	identity_helper.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe
5580	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4296 wrote to memory of 4452	4296	msedge.exe	82
PID 4296 wrote to memory of 4452	4296	msedge.exe	82
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 5004	4296	msedge.exe	83
PID 4296 wrote to memory of 3524	4296	msedge.exe	84
PID 4296 wrote to memory of 3524	4296	msedge.exe	84
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85
PID 4296 wrote to memory of 2464	4296	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9150b7bd814a87dee13492282f727180_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffef94246f8,0x7ffef9424708,0x7ffef9424718
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,12133045714943106536,11885024164341341494,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,12133045714943106536,11885024164341341494,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,12133045714943106536,11885024164341341494,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12133045714943106536,11885024164341341494,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12133045714943106536,11885024164341341494,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12133045714943106536,11885024164341341494,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,12133045714943106536,11885024164341341494,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,12133045714943106536,11885024164341341494,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12133045714943106536,11885024164341341494,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12133045714943106536,11885024164341341494,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12133045714943106536,11885024164341341494,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12133045714943106536,11885024164341341494,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,12133045714943106536,11885024164341341494,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4928 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5580

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4008

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4508

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64
MD5 f61fa5143fe872d1d8f1e9f8dc6544f9
SHA1 df44bab94d7388fb38c63085ec4db80cfc5eb009
SHA512 971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262
MD5 87f7abeb82600e1e640b843ad50fe0a1
SHA1 045bbada3f23fc59941bf7d0210fb160cb78ae87
SHA512 ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 e03218b1059c26d2cf63841f09e7625bc74d5a21972134586a5cfc47b1b26b20
MD5 a875d441cada085c4eedc0413a505654
SHA1 f5d0712ff1ed45779b28a05c1d32e14f0782ba0c
SHA512 689283722af1695d624dbeb3f617d23b4d92361c56e29212c0d779c3f30f20153f9199fde2dfb194d91cb308fe7b4ea3d12ad945112b22f9adeee1c2c2272f4e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 e1945986c963326bcf63da9fdb9be80c4cdc0009522e4d2bb97855008b628c3f
MD5 c2d675bf521b8764b6b8876db3728fe0
SHA1 8ad6e10e59ef56d6e1236c517ae99e68accb564a
SHA512 060c4e38dd8959aa9c28a0a4175b12b1a991ce6af558beb9adf830435d528fcbc0899d41a32198628e6c4b84669a4e9d168d9819eadc7946538ac124c82f1301
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 d098d0ce9245184ddb3689aeddf63a0dd814c244e586587d0c830dfcc1da8572
MD5 d20cedb803a54d5d11e2d5f1761249a5
SHA1 edd1f6afcf60ac667bd1f6cb2ab84e8e671ba747
SHA512 b425bbb88c703976845ed4302574d0b0238db353ee7da63b085fc2c304062259d390961308b14a76278ec9386370111fc2410fb446643f70be1a1f092b2a5293
SSDEEP 96:nEkF21Tj0wpvWMoiVmdeH/z5VUWQyV+VDCziEwb:nEkkNQGWMXnro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 98a6cf381319034d9ce626bdabc24aaf52e5e726e9ab1851b3a730c48034902d
MD5 b60d8af4091f2d03c110dc6f2c19eb2d
SHA1 5b9ab8a972f63ddebb732fa4bf98f534b06b41d7
SHA512 ad27bbbf97bf2853631fc17ffd79070338edfee12ccbe53e486d4309b8a6e8cba3e86671fd3a11e3126ea54f341326866bdcf77927c9e038695ec1add610744b
SSDEEP 96:nEkg21Tz0wpvWMoiVmdeiYfiMXMX68Guq/z5VUWQyV+VD7AiEwb:nEkHNAGWMyYfD8qgqnrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 605e42d19ffc378e8b2648936ba21e27da8b4d46ea41275ad8e038dd439c0fce
MD5 5607639895c1489217eb7f6e3229545a
SHA1 19d4de5c4fade7ef440a6be6b1e73d0cbda97d67
SHA512 0e0769067408997e3aa3b6b3826941fb941f731fb8e2e7d488f082035acdef8b64579839aa17ed6a1f987d534b749d5483c687d33e5fb74c0fd964bec93c2d03
SSDEEP 96:nEkg21Tj0wpvWMoiVmdeiYf8Guq/z5VUWQyV+VDCAiEwb:nEkHNQGWMyYfgqnrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 f85a93111761c45cdc3d71bcf73d528fb8eca5cc9f6187cd916c1c60d185e4a5
MD5 09e3a0887360e2873f895fc03f405e20
SHA1 9a0613f0c28f60fb6fcb165228e375e21c923053
SHA512 24f36316ebdcfedb84a698094ff990b1b2f5c4132bf1944efca0aabd79702a04d844922416bfb78381aadaef5146bce96554f5927d2bb0ec0cb8538479b424e5
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57bd45.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57bd45.TMP
Size 705B
SHA256 8b6cfb3bb278e670d973a2afccb40536a805fad8489f822c534fbfea52d9ad11
MD5 368c5e64cdfdf2e0e80f27136a5228c9
SHA1 4db0556beb5f7bb0a41a7fe529dbb5ffd24c85d9
SHA512 c56302d11e896d1956b14a208d4347d0437a795607b5976796d3061a03640b13cb39d3adb5291dc7970874ab2d68b649c836d5322688eb0ebe81f5fac75ab9ef
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 77d9a69b8308da777fa93641ed653e5fa45f4b50fe688ce22b89ed86e3365a34
MD5 54f0078497ff87c7b5eb372f18287161
SHA1 8e2490fc42678372b89d2369fc0fc27f1d777252
SHA512 983e2f801ea5c9a73a7f785fbf273fb3d9b05f7c0b3d0548ce7c65a59544b16b5ba0fc2f37d301c34e74db64569fa67e7087558980535ad6ac9449273d232b3c
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupcBvOe2RU3hmyP3z2OMDCRN:A9iIxuERzA83h09RZxYcFQYDPaOMWRHt
MD5 SHA1 SHA512 SSDEEP

Submit Download