7a832141f2661946d2e299224ad53ebc9982fec24f608ce66062c017a885c98a

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 11:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
91b037aa15133ab140e48b6a3b2e5a80_JaffaCakes118.html
Size 69KB
Sample240603-n2bjbaeg89
SHA256 7a832141f2661946d2e299224ad53ebc9982fec24f608ce66062c017a885c98a
MD5 91b037aa15133ab140e48b6a3b2e5a80
SHA1 5dba5cabf4cfec28f1728059f932da7531b58317
SHA512 3da3f4369e1f8e3946809b72284d8d6190685cca2412d1076bb89947f9376709ff41efcf4f79d65d6fdaebbb59fcd66839692eb135f8fa6275a09a9b4b52fedf
SSDEEP 1536:puxWvlSWQIaAktlh/x1H2LzxDVpjmfHNRZN/Yke2seaWeWneyqePqFjZiU5aYX0B:yWvAWyx1H2LzxDVpjmfHNRZN/Q1AfaWL
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
3628	msedge.exe
3628	msedge.exe
3088	msedge.exe
3088	msedge.exe
4308	identity_helper.exe
4308	identity_helper.exe
4308	identity_helper.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3088 wrote to memory of 4324	3088	msedge.exe	83
PID 3088 wrote to memory of 4324	3088	msedge.exe	83
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 2796	3088	msedge.exe	84
PID 3088 wrote to memory of 3628	3088	msedge.exe	85
PID 3088 wrote to memory of 3628	3088	msedge.exe	85
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86
PID 3088 wrote to memory of 4880	3088	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\91b037aa15133ab140e48b6a3b2e5a80_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff956ee46f8,0x7ff956ee4708,0x7ff956ee4718
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1976,2276982057964359925,13986504549113772472,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1988 /prefetch:2
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1976,2276982057964359925,13986504549113772472,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1976,2276982057964359925,13986504549113772472,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,2276982057964359925,13986504549113772472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,2276982057964359925,13986504549113772472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,2276982057964359925,13986504549113772472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1976,2276982057964359925,13986504549113772472,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1976,2276982057964359925,13986504549113772472,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,2276982057964359925,13986504549113772472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4560 /prefetch:1
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,2276982057964359925,13986504549113772472,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,2276982057964359925,13986504549113772472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4044 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,2276982057964359925,13986504549113772472,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1976,2276982057964359925,13986504549113772472,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1716 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1440

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4580

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4860

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa
MD5 ce4c898f8fc7601e2fbc252fdadb5115
SHA1 01bf06badc5da353e539c7c07527d30dccc55a91
SHA512 80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1
MD5 4158365912175436289496136e7912c2
SHA1 813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59
SHA512 74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 3b8266edb6fe3eda4e3bb2e866924195885c70c4f28b73c3995fd71f78ef6a1c
MD5 98d14f6adbf13130de3e68ed9c0a231c
SHA1 ef70c5b0ec454183feb8e13c36da3284c1bd32bb
SHA512 da38e83259072e36e366344e0d8565b87e2a16a1a3e62f1289d5c99f1d48ece9f536abeaa61e892f6fbe34f916418deee22e24b2e550c9e78873f71994ae614c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 787B
SHA256 2d55ae8ea0cf1c571e30e5674e721b8e3702213681d62437128db2c81247217e
MD5 315c740e8896339fc2a880c5c612754d
SHA1 12ce6bee27057cb7b8183026d6aebb2d68cdaec1
SHA512 8063bf3edc20ab6fced2f08618fd30c0c9964d62d4faf40f938841501dc822ef3e1e68d55432fd42cc9da4b0d3eea39c2cf972955a2370da187bc26acf1603fa
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 a5618af81b9123f054f0313943c8d08535b9d429fa225b4f7cf8f6fcc89b63ca
MD5 1e65cc69c9c5e9904a0d8c082d72f12a
SHA1 7e958121067d10e1d13963efa5f14906063d7853
SHA512 f55134d109dc88e4e2cf97e9a8ebdbf44df2e8536905f1c0089ef2d0a31aca249d241955d7ee39014162234379892069a0ec4d8cfc2766582a149121b8d48048
SSDEEP 96:n7k3O1hAjuwpvWMoiVmdeHvSS2UWQyV+VDCziEwb:n7kerAjuGWMXUro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 b04fba17464c664ff0f9fd9ec5e421b085768016d628c3bda43293a3bbc831f2
MD5 1426b97f75161384364072834523a4bf
SHA1 638b5d8034b4c003cf1e6bfe459f5e61d13600b0
SHA512 72605f6f6cebd1f9eeb4f1d5f2057261b8499b02ec1ee0f241a8c6c7cca18a07e58803328b0f8cc469aa09141ce20478cc7ba6a54fbfe7b70b50c10e5271a292
SSDEEP 96:n7kuO1hyjuwpvWMoiVmdeEjnS2vSS2UWQyV+VD7AiEwb:n7klryjuGWM8nS2Urg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 99adadb436939fd9d2ce0c1842914e025018f1db8a9ef735f1832ad3f6981cb3
MD5 0e497505f80be10ddb51e985da2ba25e
SHA1 3b20672b622af7f8e81c7499d08c8f72d56f429d
SHA512 c0244d57060c47a8e9c11dacc55b4416166ae7f7dd30b063bb1404e671267dc3d45b050d24ccebffd593828b4896c55e3fa0aa2bc8f4fd22cb09f8e50256e0ec
SSDEEP 96:n7kuO1hAjuwpvWMoiVmdeEjqvSS2UWQyV+VDCAiEwb:n7klrAjuGWM8qUrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 540B
SHA256 132f5d808835a4cd652ebd5ea0d15a9d377d5323cff25269c62a1120fa88cdc6
MD5 c0147a725a9b0865db4734468dd08b19
SHA1 cc03124a1444055189904cf41d57d5a1c928fbdc
SHA512 0736ef1f7a67e1515db84b9678af4e4a0c3f3d2b3d2ba689afabfec44ccaf53148ae6cd0a19897f43f8ac5345416dc262265b196411cb2e6c83c57817b5894c7
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe58052b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58052b.TMP
Size 540B
SHA256 bcb0cc52e206b14776465a390f0d5279fb292983d4d96162a96bf3705334413d
MD5 c1563cbf41091298339ef4011ee85c48
SHA1 601450a34ec1bbcd87f32c9832ed86892b4b06f6
SHA512 5b5800f5ab20465ec901b517e47841327a11b6430ea44603feb3481fe010aeabc57f7785610800788938eda35c769af4bfbb977b0b5dcafd592f5cd47284427a
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a4ca46a1b770b18094707aa48bf42521446a0e6ded6ed363929d1f3180ce22b8
MD5 2c0f2a9b9af0ced96dbc2a8d29f4b68d
SHA1 8dd3389358db14aa78b7fe140b7b92bf8dacd5c2
SHA512 a610edee4672af8112cf7998e01f67f99b5cf990647b1fcd39563610e79153456e466b548606050a0e38505b10c267c97a3d8d013201e24770a3f4317866642a
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupbce2RU3RuC3z2OMDCRHql3:A9iIxuERzA83h09RZxYbCbCaOMWRHql3
MD5 SHA1 SHA512 SSDEEP

Submit Download