adcf8c9f841da52b35e66e86bb209c352b2e91a1c3e1cbc0e82c2ca5920c8538

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 00:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a3271e10742ed9fdad4d5fea3b4d938f_JaffaCakes118.html
Size 11KB
Sample240613-atmpqa1bpn
SHA256 adcf8c9f841da52b35e66e86bb209c352b2e91a1c3e1cbc0e82c2ca5920c8538
MD5 a3271e10742ed9fdad4d5fea3b4d938f
SHA1 aec99e6028d4b87ca84fd03fdf8f1775a797ea0c
SHA512 4f72b4cdddcdde0b351137de191df4e012e04d94b88c5524d4b7aa54dc0f56e39faa2241e6631e2d15c4c6ee5a3402d46f85a303fe13a5b2a342bfaf5593df52
SSDEEP 192:3gTES/bLicdUkAPiqiFioHLdS8GPcVzEWyNS9xMkd3YJbuX73Rn9PwslNXu/:3gTEaFdUkAPiqiFiCdoKzk8NnhXu/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1720	msedge.exe
1720	msedge.exe
2128	msedge.exe
2128	msedge.exe
1692	identity_helper.exe
1692	identity_helper.exe
2760	msedge.exe
2760	msedge.exe
2760	msedge.exe
2760	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2128 wrote to memory of 1432	2128	msedge.exe	82
PID 2128 wrote to memory of 1432	2128	msedge.exe	82
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 412	2128	msedge.exe	83
PID 2128 wrote to memory of 1720	2128	msedge.exe	84
PID 2128 wrote to memory of 1720	2128	msedge.exe	84
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85
PID 2128 wrote to memory of 3120	2128	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a3271e10742ed9fdad4d5fea3b4d938f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffac76d46f8,0x7ffac76d4708,0x7ffac76d4718
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6304 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6304 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,15609540657751422235,2221521099429593777,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1724 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2760

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4596

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1388

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 e6bbd4933b9baa1df4bb633319174de07db176ec215e71c8568d27c5c577184d
MD5 477462b6ad8eaaf8d38f5e3a4daf17b0
SHA1 86174e670c44767c08a39cc2a53c09c318326201
SHA512 a0acc2ef7fd0fcf413572eeb94d1e38aa6a682195cc03d6eaaaa0bc9e5f4b2c0033da0b835f4617aebc52069d0a10b52fc31ed53c2fe7943a480b55b7481dd4e
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 2ebd5229b9dc642afba36a27c7ac12d90196b1c50985c37e94f4c17474e15411
MD5 b704c9ca0493bd4548ac9c69dc4a4f27
SHA1 a3e5e54e630dabe55ca18a798d9f5681e0620ba7
SHA512 69c8116fb542b344a8c55e2658078bd3e0d3564b1e4c889b072dbc99d2b070dacbc4394dedbc22a4968a8cf9448e71f69ec71ded018c1bacc0e195b3b3072d32
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 ef8931e2e9db823fb42bf9a3ffb90f0499cae2f94171d2d25ad6f7391e44bcdc
MD5 9f952ba4035601f2231079998a6fc2d4
SHA1 f6766a2b9b3be15211f058d337073494a04f9b14
SHA512 12538cfc2c67b94ee8947db8ae5b1ff6dba25eeb13ebcf19d4c5beb923c2d95f39830e5410e0760344a9ab9aef61eb0c1929fff2e94dbb62dac093cf3c406029
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 599B
SHA256 27ae4d1f4612bfd955a9ed7a2c792557080d4cf59acae7b20a71cbfcd61eccd5
MD5 705fde957a913338169be16227eb76a8
SHA1 d494803674019b10564bc2eacf22595b321cbc4c
SHA512 80e31f3aba47de1e2f2c722babb78620ad794df9ce1f0311fe6b9575baeddbc30dc469bbe95dfae672ab07c13b03089fdaadf16dd2d45e97f59f0217ac54dea8
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 33ce47741e00a9b96c76646f362d618e8e6a5ac0f0d092c19770d1658f9c4bcd
MD5 e92ad2804de0bfd620044c2e3a26e31a
SHA1 e063607c575cc94e571737c732b294f8dc81c6ae
SHA512 4a04ec1e80cf148cbb1eb9c18419512b59317290af7fc3493becedbf44fb0a2435e03ca7923ecb02557994f40ac745ca5e78eaad205ee85c9c6dd838d73b4f14
SSDEEP 96:n6y6kVoxm/DnmqKy515RwpvWMoiVmdejGnSq2WfxTjUWQyV+VDCAiEwb:nB6kf6A5jRGWM1qprV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 0c3c36cec015fdaea6d604d599486e917107bbc987cfe696865dca3ab833f169
MD5 f6aac4c7add1c53ee3dfc51fb02547cf
SHA1 7044ad15abeea5aa17f107a59a4c3dd9ebb94a73
SHA512 e17d4beee20a0112387c64c86b583ea7f24300b3b92a93392beb164dab3ad2e4cfe7ce54c7490c962c29d2fef20554af5cb647ad6ae18835ba3e5ac9e3faa4e2
SSDEEP 96:n6y6kVoxm/DQYmqKy515jwpvWMoiVmdeH2WfxTjUWQyV+VDCziEwb:nB6kfIA5jjGWMXpro
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 192B
SHA256 b692afde530f6770eac277ebd9aba6bfbe0d5bcbe5f9037be15a6f49543fa82b
MD5 0bba01aef0a6c6969ae1538d5749fb9d
SHA1 dc4fd8f29f68cd5f2d7c80a7a891ce62bc4efa04
SHA512 7ceb59ff0c035aac992af7d73556220ed00439b743a8bf6fe41f16d4ad1fd864d9b32702e9ae3fe8578c00f6bb6aad88635c82ed002ee599be4a3150abf307d4
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe57dc56.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57dc56.TMP
Size 48B
SHA256 92bc55d08f2963727a2682d3069696840b392c246186861b1fb2982a148732e6
MD5 732ec4119e7c50eddf116fa8d53d456a
SHA1 932d822196cfb9dac8ca9a1d226d94496df2a50d
SHA512 0ff019175436275ade2209941cb160497aad0a9ac393b9ed6720e77bc8f5b22bdae666ae4f9c664f9336fe6f038b5dcf0f6a3f4ad406ee5a24660d44a827550e
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 370B
SHA256 d0344dbafde577769688f9bc754f4b8725e55fa80d0b895aa521334b553d5d7f
MD5 80b00e174eb7bb50dd88436863f7c39b
SHA1 28d9fd478da91d2aa8ccadbe7fb0249f213030ae
SHA512 83b790f650f7c40c5f7da2be722d18a6a591ebff62ab9beb6e3c3d17f541c45a497c8183769bcab6d23249b67f24653db1d086a9823bc3c79f7fe0416b091fc7
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57b48b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57b48b.TMP
Size 203B
SHA256 a8bcec4138eb6f2d3530a45c3b1197bc41992ac0aef8ce79c9b2ab675f3f0635
MD5 4fdbd7173f8f974701100962bd7320d7
SHA1 cf63510a66c2fa4435eb9c00c52ab6796149efdf
SHA512 c22504614bcc9789e366ecb1329d3585e7d0b531a6cc4687fd352a75cb986c071cab700c1dea9ea24a4d9f8db9728d7a0163912757b2bd12873d4733e3742a38
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 b5c3ccf5562e6e433b3cc61443f3a77801cf6133a76a7d5972b079d6299d61b7
MD5 b995690999001bba2ef4dc3eabce54ed
SHA1 951bdad95129e032170e192d01ac84881772c58e
SHA512 f8b30f44ce40268c50f4feca34783bf96b2f9dd3de5a7ddce2a6b939a08658fde8c5fb8c7669edea07c7468a230b9dce04e71b495e28cda4f223094e60d8adc2
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup2Hf8e2RU3Q/I3z2OMDCRHM:A9iIxuERzA83h09RZxYsqXIaOMWRHqlB
MD5 SHA1 SHA512 SSDEEP

Submit Download