8880ee9e0cfcff88c98f91364fba13ed60b6189ed6aa71ba1b94afe54abd9bbc

Analysis

max time kernel
147s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 10:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a52a66d80c8c049f5f1c0891eacb4fe0_JaffaCakes118.html
Size 73KB
Sample240613-mx374awajd
SHA256 8880ee9e0cfcff88c98f91364fba13ed60b6189ed6aa71ba1b94afe54abd9bbc
MD5 a52a66d80c8c049f5f1c0891eacb4fe0
SHA1 b7a641b412218ede6e1e614471a7c0c804598d97
SHA512 2a44e31c3850921bb8bec89070a9f0d2482e3789aec240188d77a906a4a39235a3fb60fe2edce30a76d23ac90e6bbc17d57eb9ec5927e22db668fc7bc25eaf99
SSDEEP 1536:pwgr8VkeO3Dx9rQWPyWJIg8jogHekjJqR16aS6cgRrmXpRr:VeO3Dx9rQWPyWJIg8jVeIJqR1vMXpRr
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe
4316	msedge.exe
4316	msedge.exe
1224	identity_helper.exe
1224	identity_helper.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4316 wrote to memory of 2604	4316	msedge.exe	87
PID 4316 wrote to memory of 2604	4316	msedge.exe	87
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 4564	4316	msedge.exe	88
PID 4316 wrote to memory of 1364	4316	msedge.exe	89
PID 4316 wrote to memory of 1364	4316	msedge.exe	89
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90
PID 4316 wrote to memory of 3012	4316	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a52a66d80c8c049f5f1c0891eacb4fe0_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb186746f8,0x7ffb18674708,0x7ffb18674718
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2628 /prefetch:8
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4124 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4892 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6880 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6880 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6876 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5052 /prefetch:1
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3176 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4892 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4189586314082398056,901331906424188321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:2552

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1604

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4544

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 8185c36aaacfc71e42f94fad8e198fe7fb2d868398ceabb89261cae94341cb22
MD5 257c0005d0c4d0bb282cb470925e4376
SHA1 f9b8efb511ed64292568977c9f2ec255509e8f7d
SHA512 2f3e8f352ed3ef88e8c28650390f93f98c92174d268330b886f3ebd1ba0163999051298ee12a054606b4986005452a241c6864cd292e69492d79c37d500556f4
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 05e479e8ec96b7505e01e5ec757ccfe35cb73cd46b27ff4746dce90d43d9237c
MD5 4819fbc4513c82d92618f50a379ee232
SHA1 ab618827ff269655283bf771fc957c8798ab51ee
SHA512 bc24fb972d04b55505101300e268f91b11e5833f1a18e925b5ded7e758b5e3e08bee1aa8f3a0b65514d6df981d0cbfa8798344db7f2a3675307df8de12ae475b
MD5 SHA1 SHA512

Submit Download

964fcc99-b21d-45cb-8b1e-0a863e5c0d9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\964fcc99-b21d-45cb-8b1e-0a863e5c0d9c.tmp
Size 7KB
SHA256 6018ded9b4cf75d59b59ed01634cd9791a7b6c9cb07ddb707f3a00310a196bee
MD5 bbc4b39d38208fab853967f5fa8737df
SHA1 efd0defa80d09292db0c96040720867bd1f08443
SHA512 9872d6ecedfc6394fcb8e0fe2319dc982d615993c3bc04e2ac42b307898c7e0ff098684cfe10f06831cb122cc1f2ef34535c1e242c9bdd32587ddb5aa4a999ef
SSDEEP 96:nWkIYgm/DJmqY10NDIwpvWMoiVmde7tZPvSf/R92W3SUWQyV+VD7AiEwb:nWkRYPyJIGWMLtZPvSf/R9Krg
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001
Size 71KB
SHA256 726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b
MD5 da52e38c98b0f2047abeb07609608ab5
SHA1 da1210caff36df73e49a0c271ff7d573c2d20d02
SHA512 35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b
SSDEEP 1536:ntQRw6S6yzj9mN0hBcdYzdFONVzN7pPMJhJLY3T+2z9ANKokoV:ntQRw9BX9i0hBqSFuFp05LY3K25ANKo3
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
Size 61KB
SHA256 ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6
MD5 468446a7240461af44b59ebb2047c231
SHA1 47b7c525dc91bece99df0c414960b9490b986ba8
SHA512 ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8
SSDEEP 1536:8b3HAMT093crXTgJRNAZYBmuhSeIUQUYaoxMaagTEwL:G+WXTy8u0eiaoWJggwL
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
Size 20KB
SHA256 fb5b531776f398b46eda13ed3ccddeece8fc54653f27b93fec45290a31cd840f
MD5 cdc9f19a52e87121bdff5faad76470dc
SHA1 61786f32243b3384fb8bd1f460070465d32ad556
SHA512 d80755833280d63ee7c894510ba25d1ef4ec55757798126bb0a2880b9d0f90489c0d5f5765d90673ee7d6670931be05d38c42929b938aab3d6f643e5cfa0fa3c
SSDEEP 384:yKvAZx6Ov7m6IqL8CYo2d20hOjnL+HSrK55EqBXrEVPGsl1vq:vvAZxF7m6HTgdLh2ayrQcVPGsK
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
Size 34KB
SHA256 756855a223f61dc2fac4f8f120f988a6dc516a3c75418fb8bc47909cd7fbc2f9
MD5 318ae59c9b73c8000970c69c490509af
SHA1 af2868769ec742a0e550aed7359e632efdb49c6e
SHA512 b868471c3f90d08b1bc12d1120397e7aba1f5f01690bf0c05bb556472352af70d6dc199f11ef3d6e4c5a88685c6815837bf00d24053fa79add7bcf049d9a1b7c
SSDEEP 768:3EFFDI/5AHY3grZzT9RMAUIwRjjy0LeKsLpoJk16k5bgmZdxMIo9liLTJR8iE:0FdI/MY3gr9hRMviK2poJkd5Ekk4LT6
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
Size 84KB
SHA256 1ee7dc7852a7aafef0417eed907cbe79a8c72ea669c96baf1ad91b8610ef3d04
MD5 daef93ff57e41069ffa8cb4b79b63236
SHA1 8fce7c426bd00cf9f960abc4ae263e995c1c975a
SHA512 09b5d65e3c98c09148e26df103f9f7e4d7b4ea07eec677411e78cac2dbb5c60916ede41393c6c0bcc531ccb585e9a0ee159be7a48e24e0ac109be2aeafbc1800
SSDEEP 1536:XSx2E14SD1yyH5R1dWZ3iXiBVi2mXiwiVKiqUoQNuLDloecABf2cpqX:XSM4HzRnmyXkVi2aViVqUo9LDdcYpqX
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
Size 175KB
SHA256 3a8c75474596783396a8233e6ae2ea5da74670c59bc1c0138a7d94104acc197b
MD5 d5ac54b91bc0828d4f93448eab11b6a2
SHA1 34cc0d481c1629116fa1a67779dd999c9b7acf99
SHA512 dac7fad68a2a647052207a975dcd3630738e985b89f5d3d6b636edfa7132665302b91248d4ff332b02f78178e3f96aca51e2a4030b774b7d166f82e9379a56db
SSDEEP 3072:o+L6xlxMy18aBOX6xDuXhd4RCr+C6aeQ04tSqwcWowEC/HmlnvjR5yCH:luMwlulXzJ969Q04tSqwOnxj/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
Size 240KB
SHA256 0c27c55ed5c3b0b4960d6bcb0a0e942f77da3197a7e5118c4fe994900dabbfcf
MD5 61584ff360e45b3eb052831e850d8960
SHA1 7355e6cb8b9848aa6434c5fa9d484a3b86340aa9
SHA512 4633b027d0bbb4b493dc7252c9b259ab893b294e21d6641b5298c6f6c1430964c308eebe793fff0eb0e7105d549914b6fc0e5c3dbe9c7ab745e107f21306df60
SSDEEP 6144:e5GoHxiMw7QcFpB2evKdkcDlOYxq9ciS0DwQu1qx:YGIxiMwEcbBXqtDjxqnwQyqx
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009
Size 20KB
SHA256 6fbcee96ff03dda5c63564f0ffb9d19b21785809071ef8c06bc51f225daaeb6a
MD5 564be91cb7ef6cb7320d73790c21b568
SHA1 97c0c90fa1194cbbe5c17bff1dded992908df604
SHA512 fe6b743b8fbbefea37eebbfd28b8780dc02a7ef06fa41150b8ba3c74d74de615a0ea0c303f017b50af0b37470a962f7e4e7e9c84d6757fada831a2e841528483
SSDEEP 384:sJtcaLYpTfeOj8VXE1SH0kTXBKyyspDgVWLBvBbut7vpHfZqv:+i2KFjIISUMIMDgVWLB5but7vpRqv
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
Size 53KB
SHA256 3ec12d09c838e391ddaf6bebe27f8ef0829fd016b7e9e7eb87213e5d59908f3a
MD5 54d701654797f3298f552783c6779d4b
SHA1 50e5653d935acae83def455fae58e85e8251ed3e
SHA512 38c1c2a3aae448d1e7beb5a6c4e63f74142e9cd680899268ff8aa5333b6acd6e7aaa4513ef103843ac1e754bd5af58628612fe6d39ae0fdd706dba33710e76c1
SSDEEP 1536:vcZl5UA3LIaWcKqskUS+aJuE6w5sQUbrEFWGgGicA/gP:ybLI/NOJuE6GQGgGicAoP
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
Size 30KB
SHA256 1df4e150ff1f02f8c91619323f8cb393c5c6497f6e9e4858d5f224effa4dc97d
MD5 c9be7354ae0929d43a057da45368aa95
SHA1 107afd7b6464f947468fcd5f1045f4f25e54ba54
SHA512 7d0ee19f72d21cda2c0087a08df51c9e086386eef73f486aea2a2e9f1fb7db9befac3bed33cdd7c686d5f8f59d1aa7b443107712ea4b3504ca082fc4eb71eab1
SSDEEP 768:vBTckxetcowG8Mas/pl8Rwh1HjvKCXSky6S/GexL0dP:vxFxetyLs/pjHZyDW
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d
Size 36KB
SHA256 fc047319093d4e1f2f3bb4a8bdefe51a531e6bc3693f18bc261f3072cf061ae1
MD5 710a14d96a535c2d30433a184ce70e65
SHA1 4edaa281fb20f2c9d454b7c3445e06a025d2a2e6
SHA512 3879570f879f6fde8e99b22a80b76d013792a45927bf20233659bfea4ebf7545c0206592abd382ca30d5b3d5ceb434423491dcca1c13da63bbfe0569832d4ca3
SSDEEP 768:YhNQHC1QrLbkKmcBkZhPH/SJNvc2S704D6giTz3w+g4ARjFbK0f6KR9:YhuHC14LoK7OP/SzcUpTzAlVFLf6KR9
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
Size 23KB
SHA256 9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899
MD5 e1c71f7c04be834f5587230db2ad24b3
SHA1 f3bab9cb99d9f343bf7ed3981aaa7450515d2424
SHA512 205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51
SSDEEP 384:LrvAH+TKO2Dci+FlkjrkWOKJepIhTZ47jmxKbHsc4VzhGKTdHn5Y0MlJacX9oybk:feIhQcf4fkrTpidOdjz4jGAdH6vPao3Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f
Size 33KB
SHA256 f3a14a6ccc1a73edc65c592283ce470d6610916b5eedff513bca10711d5b39ce
MD5 2083fac72d4f4387c80c8cf70286fa60
SHA1 d1afc25a73cee118e065532cda54923ce24e630d
SHA512 c4cdbdc289aeb12e8e6b58c58b8f88ee2a1038e80e86aedd2868656481c26a8ee66613a3e3ac3c4fefe6337711dff372e72e602aff8eb7d9acb4ff2936e5f078
SSDEEP 768:vZ6g06/vzWNkQm/2MPUhpfgqbnY3QFgyLZ31BBjVVjQo:vZ6yHzYdM+hgqjmegyLfVR5
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012
Size 19KB
SHA256 98dadb40ba05b9079b6c7cfdcdce83a11764b15cee748e1d6b06ef13e94f1736
MD5 c52f3521639f61d058b371c90f7340a0
SHA1 26cda00aa74d363215fe8e5de80878cf767d9747
SHA512 ead5c9d264cb85f32a1e4e7ca84df51b2d8fcad89abe35b8a9e461cab914224e5ee9c3b0cbcaf720ffaf43566b9d9c958667024e0e6988f948640fd782ff3f23
SSDEEP 384:4Js9swAi/TSbWEYziq6LM9ky+vydj78OU9UhMNqV6/MXk+YKlpRfoohz:viwAvoTb5+v1emgV+MHlpRZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 da300d76b79af7851823fd160ea0e1f4621579bb09f6615346107734f6031c9a
MD5 f9cae9dffa56d824ca627f372ea3cc62
SHA1 d9703c2b0beda734a49441130163feee73b618e4
SHA512 5d5ca926097202218eaede517b31b094250f0c63de52fef4752b9282666b6c1578e1826c4f05f123732833bd71040c8e6b357117469d1400aeaaa3808abfc8e0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 cd50252d69e3e888ed0a19cdfee5ce2d3c7acd3759ff871b3fb57ec37eb10a0f
MD5 3a4957fe34d55d7196ce58d13f3dfb77
SHA1 13738e4034134396e837d0b9f50c28e4fe4f71d7
SHA512 185edf859c75a942e74414f03d9439b462e330420fecddf0febd3c7c3976db77b80bf899aef30d7ec2fb88d093454e03af7dd6d0334c1993b86cafd1582f91cf
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 571dec5d442142e3b27f8ac0f6d829a3427187e275cd7e7e48195ccd35defea0
MD5 1421fac1761d38b83dbaff9ea4e3b4bf
SHA1 38ad2491689e0d3bf8749f79a71040768796870d
SHA512 693f09e314bbdfa3449656b47f9a7e46b5d832e610346538a157ec91150605a9777d8dbad46f3c4ed32decf7f71aac88e34480731a224eb2942852a32a1b5e39
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 19d2415db5b4f7e1374e7e8b601907b0577a4677704ffe396528946c75b8d2ba
MD5 b22540bab7ddc6b60bb07e123a85acf8
SHA1 822c0204f73e17d8fd732436de1b1dfc51f05e08
SHA512 bde27be28afed4d32bd7bb58446c2a5c2092db3fa0ea5a3d079917b502aba4ddeacff7abc2e0f90791ce77aecdffc1cf447cbcb8b477f04ce9f25e9e08a4e2ce
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 9b2a73fd090260db558b47c9d271a8fd192716b81750c4a3438ec0525b02cea6
MD5 f0a23c483fe13afd51adab6a2f39f868
SHA1 ab120018006f35da603f539eaa145176fccba24f
SHA512 2db601485181eca08d7c170cad4ce5c7c8a213cb986095134d8cc67555a26a76303ce54eb76f0a8edf3f37f16ac4ae228181f42abc589c8e7788693b435a1894
SSDEEP 96:nWkIYgm/DQYmqY10ZZwpvWMoiVmdeH2WfSUWQyV+VDCziEwb:nWkRIPyZZGWMXCro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 dd4848f8ad3985ed42b34f512ffe4289a4326cb963a38f28bf2e818b6094e6a2
MD5 fea3bba4523c08d3fe3943b541a68a0c
SHA1 d851076d65e8601e5fd2808f4e81673747274ba9
SHA512 84df7a448419f34319707f41dc809d62b5737142495216e0da13060114dc53e4d8c04081c0bae9fcec9af1564ac2539901d688846764618438307180b34fefea
SSDEEP 96:nWkIYgm/DDmqY10ZJwpvWMoiVmde47t0N0bx722WfSUWQyV+VD7AiEwb:nWkRWPyZJGWMI7t0N0bx72Crg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 83eaa8b9272116956b919f225e9d79d9a19a44a6977d386c8d31d8239ea3abce
MD5 97ff59f6c5b99c77473a9a9001bb6d81
SHA1 249972300cc3a0ad8c77632f33e8dadb3a0d9e91
SHA512 9eae148f972e74efae37972c98e37ff12e363210447c0765b9e5c30510436c43a5f495ac1f8bdb573a3f7fc985158c1fceef34cd2ad142788e053e8b71190a61
SSDEEP 96:nWkIYgm/DJmqY10ND3wpvWMoiVmdezIuH5Iib6eM2W3SUWQyV+VD7AiEwb:nWkRYPyJ3GWMDIuH5Iib6eMKrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 14369db81178bc7aaed1bac7f056bba4e64610d257f16cd3f25b4f05dc5ca478
MD5 9e83b13b6dbd817dc5ed578a7dda451c
SHA1 7a2fd6ca6ddb299d76cabd30dd5c75747ec95a9e
SHA512 524d746086d7362e2c639def92d3fd7c71da90ca85c07291a21cf0d9f7a45705d8067d1c5bcc9a6a7c894501ee3245bad712936a2b1cd6a462484f8e1576e119
SSDEEP 96:nWkIYgm/DnmqY10ZJwpvWMoiVmde47t0N0bx722WfSUWQyV+VDCAiEwb:nWkR6PyZJGWMI7t0N0bx72CrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 bdd64ca92e8f519d7dcfc1b1d657e43269772d2dac5482f11c145f5a0cac1f55
MD5 5512aaade62cd97af94f74bc390255cf
SHA1 f5379c2098842ae9949677c0ceba4fe468acc6e7
SHA512 69e7bdfdf4930de0a9618e6cb819900ed14ba11b32785378d56046c3653e536a1bdff10afb2325f8d89cde8c581deedbda5460673a2f53ab57d28b2944e22cca
SSDEEP 192:nWkRPPyJ2GWMTdidaphdGdTdhdxdEbKrg:nW8yJHWqE8PYpP/K
MD5 SHA1 SHA512 SSDEEP

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 24KB
SHA256 d58162c5ae5e18fc06604c285e024c01686093d70994dc93b4ae9d85b4c3f7b9
MD5 95cd1581c30a5c26f698a8210bcab430
SHA1 5e8e551a47dd682ec51a7d6808fe8e0f2af39e86
SHA512 e49403df10177053634c431203a91d26df5dfb23cbbb88847459ecdf4b6107040d0944a3e84ee6bb26cb4e8017a35c8c31b658387cd1b6938ba4cb9f59606ece
SSDEEP 768:ntEW/l8F1+UoAYDCx9Tuqh0VfUC9xbog/OVHLlj2rUr2A:ntEW/lu1ja2L/rL
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 706B
SHA256 29216625dd4269670347f810ed8345f24c997a29bd26e98e09b4361ac4639bef
MD5 367038dde1b331ebb64083bc736fad14
SHA1 cff5241797bc729007c2512dc7f9deda12a6a5e1
SHA512 7dc1d82065803d15fb3f9ce6eecf554c708867598efe461c2bfce21a054d269a2962048aa5bafb4ec3640a71522ccb0a011bcc6286e7ed053859144ce3aeeef1
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 706B
SHA256 94ea6a8eab74f049ebf001212e5d4f4e785b759113e2e13e431f50ce826e97a7
MD5 ca1b96286bc3b6feaa0b384ba12774f9
SHA1 fef507621dd2232220b1c3507b169758e9bdd844
SHA512 d98af169a6993fc9ffd35541dd899df0d28a1d20d7f9b1a1801997da31f2c622685663cc7f555fb3bbc4b3fcc92a18532332fcb3117c9a148cbcfca68df33e7d
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 706B
SHA256 fc4063bd47514402d873a5f4dc347587dae70c10c002c6cd1587f5efe1c4af89
MD5 bbc209aeaf47ada63aec165f57d588dc
SHA1 d95ce46219a9953fba9c63444a51e7720c367a4d
SHA512 5f11bac9c865a15ecdefb2c643786e1d8a594f46eb37071205ecb725cf82d3dd3c8cb0998e00fc94215508c20c9bdcba0ecb8d4130237fe03452f8819f83ccc8
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe58f846.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58f846.TMP
Size 706B
SHA256 58bb6e84d631aa9c15f926a061e9928bac9fed1a28b19712583e1e5837effe69
MD5 a8fb6021511d0c9fc4b555db76aaced4
SHA1 cd92e627524c06778094e519d50d4e2c525daf46
SHA512 335cf58b9051cbad0d6a7dd767e1472c37fb75a0ef78c17b80265b7b7152eafe7fcf69662c82c3a39c3f1909a992ed598c603242bba4b74538e85432aec8a2d8
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 7bf1bb7b1a95094a3de59e0af454f34a76276e3869c6445001310a5c6f29f7a5
MD5 74bde595a5917e58bf7f1bd4b651151e
SHA1 de44cd994e1be1087effd5e4ddc87c59c0822bbf
SHA512 f9a0022aa0902d3f4829a36cf42f5efc93a7adb134d57148eaed8deb04a2133afd74ed132e93200d94a31da24e7f6c4057376be85f8fb8b8e92ad796a49b85d3
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupeHfRe2RUKJ/h/X3z2OMDCU:A9iIxuERzA83h09RZxYkdrJVXaOMWRHC
MD5 SHA1 SHA512 SSDEEP

Submit Download