de9d32042923eefe11595ce69577aa905a2ced3279509248f9151d64ece21c9e

Analysis

max time kernel
141s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 10:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a5060fe72fa177eb66eac6726c20f8ec_JaffaCakes118.html
Size 128KB
Sample240613-l8pneathqf
SHA256 de9d32042923eefe11595ce69577aa905a2ced3279509248f9151d64ece21c9e
MD5 a5060fe72fa177eb66eac6726c20f8ec
SHA1 1a4debd4daf614507ef6970f3ee163f120af7eb8
SHA512 306ab00a94f27c446c816eadb47f57dee4f59e70a15ad44e8fc30588405b98eefde9a4d7c1ba9b830f97d641425690d88348da8cc4f3c6f9858b3c6dce690aa0
SSDEEP 3072:udpDLFzylh9AXmNAZvRFicyRzLhxNlG297tJlH:uDDLFzpXmNCecyRzLDKS
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
912	msedge.exe
912	msedge.exe
2220	msedge.exe
2220	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 2344	2220	msedge.exe	81
PID 2220 wrote to memory of 2344	2220	msedge.exe	81
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 3796	2220	msedge.exe	82
PID 2220 wrote to memory of 912	2220	msedge.exe	83
PID 2220 wrote to memory of 912	2220	msedge.exe	83
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84
PID 2220 wrote to memory of 3300	2220	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a5060fe72fa177eb66eac6726c20f8ec_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffb7be46f8,0x7fffb7be4708,0x7fffb7be4718
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,2626380391438442480,14739217372156463796,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,2626380391438442480,14739217372156463796,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,2626380391438442480,14739217372156463796,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2626380391438442480,14739217372156463796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2626380391438442480,14739217372156463796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2626380391438442480,14739217372156463796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2626380391438442480,14739217372156463796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4932 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2626380391438442480,14739217372156463796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2626380391438442480,14739217372156463796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,2626380391438442480,14739217372156463796,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1688 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2626380391438442480,14739217372156463796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2024 /prefetch:1
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2626380391438442480,14739217372156463796,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5188 /prefetch:1
  2⤵
  PID:516

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:376

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4448

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 e6bbd4933b9baa1df4bb633319174de07db176ec215e71c8568d27c5c577184d
MD5 477462b6ad8eaaf8d38f5e3a4daf17b0
SHA1 86174e670c44767c08a39cc2a53c09c318326201
SHA512 a0acc2ef7fd0fcf413572eeb94d1e38aa6a682195cc03d6eaaaa0bc9e5f4b2c0033da0b835f4617aebc52069d0a10b52fc31ed53c2fe7943a480b55b7481dd4e
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 2ebd5229b9dc642afba36a27c7ac12d90196b1c50985c37e94f4c17474e15411
MD5 b704c9ca0493bd4548ac9c69dc4a4f27
SHA1 a3e5e54e630dabe55ca18a798d9f5681e0620ba7
SHA512 69c8116fb542b344a8c55e2658078bd3e0d3564b1e4c889b072dbc99d2b070dacbc4394dedbc22a4968a8cf9448e71f69ec71ded018c1bacc0e195b3b3072d32
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 f4c5f14d4accd6a6de10428687464ad13e35dd51fd143d7188b2924485ed8756
MD5 e97240e0bcb1ff44d886aae890d88e38
SHA1 931d310838e42b7373ee12950aa352add875781b
SHA512 34bb6b76a6c751cea24e988ee3f30c00d8d8e023a95daade5bb9eed8d39856cf5b9ebba1b70a89bcfd5df45fca468133ce200da6093776631c843f76b7dc314b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 76b4d01af90589faf59a376278ca8f4e687c701a67d6df686996a1d4023cc403
MD5 d4c70c044c7199e5c188bc394cadc2a4
SHA1 a4d386112842e23747ac16b43e0b557eabe54468
SHA512 a1eaaca56e1f7c93e8926215d634fc215c01849fd8ec61b9184c41b7710003e4b31edd8a24df85630b432af28f078c3c19f0603c22611f3eb88b619ba05a8bf9
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 03b94513223b26dacfc52fe06e4d60723147ede329ab471ea9fedde473a75335
MD5 92f631d48c5957aa3adbfac3685b1d02
SHA1 15d10a083a87d542b0fae223ad1a350209ddbf6f
SHA512 4aa366d245788c52ffff032192266bea721ffe76dabca8f3de5a234e4b46a3980f0dd5133a97632bbde79beaaf9af9583a674099ca4aa84d726f03acf788e584
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 666bdde16debb0a8b7c66b1cd76991c369c1a210e9ec451fce09097c1d9e7074
MD5 41eaa94845806a511d48ee39c1ecb490
SHA1 7f133160d92311a6697a706a68a6dfb8d7fba36a
SHA512 a7d72855ee471a1cef817c193ce79eab78fd8f2bdd93aec22c9b19db43ec2b64dfdde0f66fbfe3ecf0060c80756608cf0f7f13cae3547e476aef6e56cbe728be
SSDEEP 96:nAmk/oxm/DQYmqQR1PUvwpvWMoiVmdeH2WfF+K6r+UWQyV+VDCziEwb:nAmkBIxRJUvGWMX1+KW+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 85e73fa4dd4dedd6404390e9c5344860b5de1133cff7f806850fddcbe3a3cd45
MD5 7e240896c45f614919de0fc6108c812e
SHA1 f92a8bfe0e126913142b2611c51d88cb961f7077
SHA512 74fa1da42f4f8c860a317c2425e8047b2573108cb7e07c452ff28b67fa20d5974a0078728dda6aaa2bc128f9bbc71865f2b3f97abcb215ca28b4d9a623269ef3
SSDEEP 96:nAmk/oxm/DnmqQR1PUvwpvWMoiVmdenAeB+1yT22WfF+K6r+UWQyV+VDCAiEwb:nAmkB6xRJUvGWM3AeB+1yT21+KW+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 c2ad6cfe6013e00a1101e3a8c636851dc8ba329f443c67b891337ed9072b24cb
MD5 1d2955c1d6125bdc0eb751daa9fa5bc8
SHA1 833cb35bd0b3997c45afb65b859719c1f1286eb7
SHA512 141fe2fd5fc4375a863d16692b6dd0563b6f6b4963bd615baad28f5bbb6e046faccadf1657b3b3a4f711cfbb9389b29c675725a0e3e6e8352294f264f5726631
SSDEEP 192:nAmkB6xRJU+GWM3AeBft61yEwT25G+KW+rV:nAmRRJUPWwe3G+KW6
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 371B
SHA256 886dbe40b6b9023a41bca033a576602e497fe2367fd6b291b34201bd2583ca71
MD5 4c35682876a36cefac4c2221eb51e646
SHA1 7c1b863222c48eedcef643dc96db7a8b5b819fd6
SHA512 d03046a97f5a6bc2d92633f9c7397ccb4b5c444ac490519e408e6903c657008f05aa2dadf073022fe4648b301f307021741e2bd9fbce0cb64f1fc903eb1e11ae
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 203B
SHA256 e0fe1d27bed00747b0ac1eb5c6ad25cfc4b9c7756eb1947e8f467fe1421cba47
MD5 8e63bf056052814e7618097fde3a1afd
SHA1 f637d34ff0f112fc74334fc29b477cb2a0bf316d
SHA512 9aeaf960d98443180073d7daf5d9e00918c27e659d351b2ae381689e21ae321aeba25a113920a3ba7d9c2162f0ad3463b6fb7144f038dcb0c04a7a90b731b5fd
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57a7f8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57a7f8.TMP
Size 203B
SHA256 6704c774e9ff637903e8750d9387f9851c1514554aea99a315c1cf77e082c4b1
MD5 4cf13d6777b6b535318f53bdad082e81
SHA1 e63367c21cc7b1b1ef61ff576401c06461b5f5c7
SHA512 15c7d6e3dd0edb24d018f1cca225d5ea00ce69515a69c0ac85d87d1c8f062d4b06a91128bda27c8511c4c86bc7dfe6bcffe6f38368deb69da7fde6cd00887e4d
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 acd85cdd13faaf07fd85c0b7d09189c1eb31126b05b1d991fc5d5d07a874c03e
MD5 e61de5f40287273c94b9fcbc37ec8d91
SHA1 42531b55cdcf63ff73d8f79c20a6aaa53b94ed41
SHA512 6a1dc15ec2676a1e764f5ec10fdb89a64632b7b52d277ab6d70bd7154ec71dcaaca95fde826b3047e9c3c24702c0997bcbaf377225a3fcc0121ae63601607a37
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupKTHfcge2RU6vxd/h/Br3zx:A9iIxuERzA83h09RZxYKL0+/vxdVBrak
MD5 SHA1 SHA512 SSDEEP

Submit Download