bfdac291313a407361282db6adfbf2295979a46064925df9f3d0262255e40676

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
14/06/2024, 01:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a77e0c7c599d4a0dab862be520158924_JaffaCakes118.html
Size 13KB
Sample240614-bm3b9stanl
SHA256 bfdac291313a407361282db6adfbf2295979a46064925df9f3d0262255e40676
MD5 a77e0c7c599d4a0dab862be520158924
SHA1 09cbfd0798d013f2954198b2495936b3df62e030
SHA512 8627f001bdc6326783b38edf755bca4e57baedf1097556e9be2664600e5daa0bcfe0f5e485f9f2c859057df1ca03fed4802bcf178cc32f1b7d07d194608d4b7b
SSDEEP 192:r60d+1QN/3xNNsyXwWv3xnWcF0DGCfC9hMta8xHpPnZWb9vuqvv6:r6nSN/3xNNsyAWfRiGCfBXG9vuqvv6
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1992	msedge.exe
1992	msedge.exe
3636	msedge.exe
3636	msedge.exe
4908	identity_helper.exe
4908	identity_helper.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe
2024	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3636 wrote to memory of 1084	3636	msedge.exe	82
PID 3636 wrote to memory of 1084	3636	msedge.exe	82
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 3112	3636	msedge.exe	83
PID 3636 wrote to memory of 1992	3636	msedge.exe	84
PID 3636 wrote to memory of 1992	3636	msedge.exe	84
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85
PID 3636 wrote to memory of 3452	3636	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a77e0c7c599d4a0dab862be520158924_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb4c7b46f8,0x7ffb4c7b4708,0x7ffb4c7b4718
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,8845167470434457668,8119312182958212847,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,8845167470434457668,8119312182958212847,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2060,8845167470434457668,8119312182958212847,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,8845167470434457668,8119312182958212847,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,8845167470434457668,8119312182958212847,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,8845167470434457668,8119312182958212847,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,8845167470434457668,8119312182958212847,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,8845167470434457668,8119312182958212847,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,8845167470434457668,8119312182958212847,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5176 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,8845167470434457668,8119312182958212847,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,8845167470434457668,8119312182958212847,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,8845167470434457668,8119312182958212847,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,8845167470434457668,8119312182958212847,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2024

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3968

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3100

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a055d69c6aba59e97e632d118b7960a5fdfbe35cfdfaa0de14f194fc6f874716
MD5 c5abc082d9d9307e797b7e89a2f755f4
SHA1 54c442690a8727f1d3453b6452198d3ec4ec13df
SHA512 ad765cddbf89472988de5356db5e0ee254ca3475491c6034fba1897c373702ab7cfa4bd21662ab862eebb48a757c3eb86b1f8ed58629751f71863822a59cd26c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 dfad4e020a946f85523604816a0a9781091ee4669c870db2cabab027f8b6f280
MD5 b4a74bc775caf3de7fc9cde3c30ce482
SHA1 c6ed3161390e5493f71182a6cb98d51c9063775d
SHA512 55578e254444a645f455ea38480c9e02599ebf9522c32aca50ff37aad33976db30e663d35ebe31ff0ecafb4007362261716f756b3a0d67ac3937ca62ff10e25f
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 c89ee8cfc64e91fe29cdcc9b77a9f585dc48185c9a757b0c9c65da855155a9a2
MD5 182a8a8cec5c6b5dcbeae256f534b55a
SHA1 8cd074cd7bdb6b78345cd4bb82636af5dc7a12ca
SHA512 3b4e49eab2dc8d305253d0fe1f1976d01afd54b1afaa279543feb1726e94df1bc398574ac781b5de34cda0b17d0044a1a58aa00f38041a59053c7d15da4b9d32
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 256B
SHA256 972ab4fb27f52d221e2fdb80cd759bd93539253bfe50d2efa0a17f74c2e4ccb7
MD5 63ff2ae8dcfb6d13567ae01860735b66
SHA1 002a93b593f8f51a70924eb7f80aa9341a5842d7
SHA512 300a33655a5ed50d92e86ad26584b8d808cad166ab43a3b9505a2d01e1d3f63aa7f4b73da80db28942795322dbc7bf1711aa98bbac9b2fbcd408b2e48f86ea86
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 a8fd50739cdeb74a8b537943949acedd8602741267ce174df6304907827b171c
MD5 56c93914c528716c2177ce10062f9106
SHA1 24d93ae29c06a741d5eb7cfa04041dbeb153fa20
SHA512 8c4c1aaf2632cd48288d27d9c4f8016983cf00edee002798254c6a150b5a3db87f7b6cd133528602f943bc8ac7485e209a6adbb14cf9e9dd6ce4d3dcdedb42c0
SSDEEP 96:no2k/oxm/Dnmqi14EeEcwpvWMoiVmdea4XVXG2namUWQyV+VDCAiEwb:n7kB6tuEebGWMK4F22VrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 af02bbcfbbe8a89b0871a5e4cd03c048d61e56e5409029abac885c9c2bf1bf2f
MD5 153591bfa59da3ff768c2621c3fb0fbc
SHA1 2d6ccde8e67aa5c5312bad808379f9fc673457f9
SHA512 cc7dd687fe9fedb0f5821c0c02ff1016edc1f7f4c115a7b5140c0f23a8d4f5181bc781668c9e7270bfcb80d566565d7b9a6cd07dc8d685d27f46793694fa0ac3
SSDEEP 96:no2k/oxm/DQYmqi14EeEcwpvWMoiVmdeHnamUWQyV+VDCziEwb:n7kBItuEebGWMXVro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 e5c9466c6e48f9d334aeca94dab35200c3d31e997d638481344d4eaba803469b
MD5 3954c44ba6629f7e6cd1f44d86d717fb
SHA1 c29056319c3b529c8471485600db7d838c30fb6e
SHA512 e1bdecf2225c164ebd36c46b8c699df482f3097fbc699ddba2ff338e442b31f352f538a21af34d2f4a444fb506f6b30726a5b277f1036e61ac8a838aac7983bd
SSDEEP 96:no2k/oxm/Dnmqi148eEcwpvWMoiVmdea4V1bVI4XG2namUWQyV+VD7AiEwb:n7kBCtu8ebGWMK4rhF22Vrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 871B
SHA256 636057f9a4047d4d660b14196e698c199e73300d114c655e4ce49b59f17de153
MD5 b974a76366e604f206c3f0e13b528a23
SHA1 7be5b3dd961b6f0ebb94ec4bb61fb923bf0613ae
SHA512 480e97117cca2307f0dc14bf14097753b06d2f9124c63e76c240bdbe8239e6892c612bbde4ce047a658630fca539afe3b8e1f3fde0eafeb885ad8b0ed77d2074
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57e687.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57e687.TMP
Size 704B
SHA256 4f1f040a45bde21ffeef2cdcf6e9d968d4dd8cc05d648ed6a09f82bda32b2efd
MD5 707a9fe5f2581fc583f0551e3e2682c5
SHA1 ceab5b26f5159c9d74a9fa24b07a7d23592a620e
SHA512 c478a5b44b5aac81b98620b18b46e251ca3cc33432286dc6c9fca8ff4fdf8f8313886ca42f474182b91a48bd05dbb09726eb29d6fcb2756a7393523cb536bf9f
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 e36f5063ff75a5662dda7e0deb6797e53167a5fb2a2c75f1222b846522e2d93d
MD5 230652a55901c95fd1b7790225720a7b
SHA1 5bcc54909d719466ba149891bad7be79b017f01c
SHA512 c10b3b8040571721244ba025df5ed8c1c1827defcd00bd5580c0449d0e654b4ed07507b26a7262ceeee27e0bea6fc112a04e5d9debe9cc01845643eb96bd02f7
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup36SBe2RUB9tb3z2OMDCRHk:A9iIxuERzA83h09RZxYfVkbaOMWRHqll
MD5 SHA1 SHA512 SSDEEP

Submit Download