eee43431eb9a66635419ab13b6268eecd75e63368f4ce2f0d399515cb6f4d059

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25/08/2024, 01:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bfd968f02d038826efac4427b5c42bb5_JaffaCakes118.html
Size 100KB
Sample240825-bstmbasdkp
SHA256 eee43431eb9a66635419ab13b6268eecd75e63368f4ce2f0d399515cb6f4d059
MD5 bfd968f02d038826efac4427b5c42bb5
SHA1 b19c48681ecb95c90b0502b2dd5f440e128f9d9b
SHA512 cd7476a00a4c4e5d649c16a7de8a3dfd9ce96a5063f7324a24cb0a5300a8199202116d443c3d800161ce4a7a0f116a4db9059b04fda91d619938efb2601428b1
SSDEEP 1536:Hwgr8VkeO38eWFq1NJKnvf2BEyMJIAS106hI8BAOKaS6cgRrYiBUi:HeO38eW+HovfPyMJIASLhI8BAO/KiBUi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4716	msedge.exe
4716	msedge.exe
1372	msedge.exe
1372	msedge.exe
2888	identity_helper.exe
2888	identity_helper.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe
4028	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe
1372	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1372 wrote to memory of 4064	1372	msedge.exe	84
PID 1372 wrote to memory of 4064	1372	msedge.exe	84
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4524	1372	msedge.exe	85
PID 1372 wrote to memory of 4716	1372	msedge.exe	86
PID 1372 wrote to memory of 4716	1372	msedge.exe	86
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87
PID 1372 wrote to memory of 4252	1372	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bfd968f02d038826efac4427b5c42bb5_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7fffacb846f8,0x7fffacb84708,0x7fffacb84718
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1988 /prefetch:2
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2512 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6880 /prefetch:8
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6880 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6148 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:5788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5924 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,3459836753157414221,15626614999823337929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1
  2⤵
  PID:2564

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3020

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1628

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da
MD5 9b008261dda31857d68792b46af6dd6d
SHA1 e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3
SHA512 78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222
MD5 0446fcdd21b016db1f468971fb82a488
SHA1 726b91562bb75f80981f381e3c69d7d832c87c9d
SHA512 1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31
MD5 SHA1 SHA512

Submit Download

27f8d9f5-75d8-41c6-87e4-58746e9d48c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\27f8d9f5-75d8-41c6-87e4-58746e9d48c6.tmp
Size 5KB
SHA256 fed2148c75cc24546c6539e15ef3c0e36c272fb5f6dd3c007979570efbf45dc1
MD5 7c2a54a482260eeb486a59b695d792bc
SHA1 13db077d0b304b638566b91a07807b5ee8bcd570
SHA512 b4091598317e092b60be6b0846195b7a1e839874d852beb34b18810fdbd4407f7ca1170749ee74604dfbc798b00b6f3db70259aa8e36ed314b470933a34e0df0
SSDEEP 96:nDk/Fa1H4dwpvWMoiVmdeH/ddefRUWQyV+VDCziEwb:nDk/kdeGWMX1cpro
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001
Size 71KB
SHA256 726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b
MD5 da52e38c98b0f2047abeb07609608ab5
SHA1 da1210caff36df73e49a0c271ff7d573c2d20d02
SHA512 35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b
SSDEEP 1536:ntQRw6S6yzj9mN0hBcdYzdFONVzN7pPMJhJLY3T+2z9ANKokoV:ntQRw9BX9i0hBqSFuFp05LY3K25ANKo3
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
Size 61KB
SHA256 ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6
MD5 468446a7240461af44b59ebb2047c231
SHA1 47b7c525dc91bece99df0c414960b9490b986ba8
SHA512 ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8
SSDEEP 1536:8b3HAMT093crXTgJRNAZYBmuhSeIUQUYaoxMaagTEwL:G+WXTy8u0eiaoWJggwL
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
Size 23KB
SHA256 95c98d45b7481d60c8078e04973ca86a67833927fac958ed6d8c28593454aef3
MD5 d0007015af7e55b5874b6f7711e9ab67
SHA1 fd514e45401ab3c27d2fded42f34024260086150
SHA512 375ea404a1c847f5b5e10803277d6a54fcf22ffdde3f41a06efbf4732858d749488b7ac67ffd9461a3d0b7bfd8f18ad465946cd4123c54383a410db6e699a6df
SSDEEP 384:fmkqzlgw4CtpJByzHvyMPn0cdWgrlF1xUQNaASTJJlqC3Ix7RQLSKYfkXZzakPCd:ftqirs1yZP0yVn1+QNliJJlqnx7epZHi
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
Size 67KB
SHA256 2fd19e01b0416920a0b8aafbde7a5262b9b794ea194924bb9b63617ae31be53f
MD5 64416e42798cbed4f3ee400573280ae4
SHA1 9d8f727b41a53f7dad4b390fd55d075e93bc141d
SHA512 0ab96dfa935709ae55779696e12b831aaa4c925905de771c26bf7d0985a5889afcf04f73f860db2a522243b3c5648dba428581f7ebc4706538de745e68134327
SSDEEP 1536:G7Z+iWemEXmfAv7GqbJ6TbKK4YecwFFbgIsQ0AiQG:AZ+D8XokNebYncw8IstAiQG
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
Size 34KB
SHA256 0b940c2b7629585e9b218cdd1762c3c79003dd2ac37db8992ecbfb3728359e1d
MD5 cd05640564742b1a72a818d15873a1c1
SHA1 4673e5731f755d45d3899550cc48cb79a40585f7
SHA512 b2df34cb210457ed5371085ca2cdfc59c0c1aa291865ff0760805a464f3e6a8ba26e77c5bff1e0ebbcd5973fd85833ab9e71ad2b1a2e2594f7a49c6fd7baa6b9
SSDEEP 768:/e8h2anGAYM3Ircf7jLp6gJ5KNPHZeSyf7iaD+9z4SlJvgNiDfdPCvIB/y8K:/eS2aGANf7j1MeSgENhS
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
Size 143KB
SHA256 11cbda6aec0620ab7bd33c408de67c3a461adb215493f090b327509a99a6092d
MD5 0fc94e9242e7cf4bd02cb82c9e15f2d8
SHA1 1b4fd90f07d11be7f80f51cf1516a5a182e79495
SHA512 774881d0612dbce911d6a1aa728febe049870164c75bd69d30592d1a6218602e8e29e09b6e45c49512a18be0d6ecd73c60b50d9609eff5bb9de6705a0f05a062
SSDEEP 3072:s4idY8AbSa2zQ155uo3BvCDBqrHjPnQI95CatQWviunwHK:sDY85aOEvsyvp/3tQKiunKK
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009
Size 32KB
SHA256 c76bebcd7cd0d28d83692db7617b3f9d4d519faec9fc2e6e7ec9b2ac416e453d
MD5 df75a74e51be8dfc9f69e8334e2d8ec4
SHA1 5dc65eec18922b965c51836d480aa7bb7cb5e421
SHA512 e9e6f2067af8c50cffa8b857ad9af1998118a1978ed8010de8f7a9fccde536841597b4a7b466be592837892a6431bf180f35cb9c94ce08a4f92e0875ea3745b7
SSDEEP 768:YnZF8CM1DwATCK5iQrfvEb4l2FvoSx0egzuZ+:YZCQA+siQrnILoVegzuZ+
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
Size 21KB
SHA256 101e409217ecf85114a73cb222e256680fed2c01985839796fd7ee33abba9f2c
MD5 dc52475756e1c2cd28a642483362cfea
SHA1 f3ac327ef03dcde06f67e14c832fc8192720c5ea
SHA512 51d10255550361a1d3bcb0ddda3402e7479c7babfe109982d6fd0143df08699ddcf6119c09b6f3ba357419a6d2828815c750a362c67a7e10b3159df8702af4a8
SSDEEP 384:uZIPLgiXhd+U+WPd0gxWaBRCtabXFtSNnHEURIwQD+BUJpQNozR0/7MtK:uZIPLgin+bGigxWyE6DIHEnySJrzR0jr
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
Size 23KB
SHA256 6add651cb411ed9ce9a17883c1522920a6ee3b4eb676f5b411e72d1a5e7de6e8
MD5 a0423f1305547bb6b8f5a4fb1a9fc2d8
SHA1 092dcf1fe57e6bb53821eb754e04188ee70602d5
SHA512 b8487c60b40d332e562cc5d4fc7c515e3b3c2c82311700b788905754c1376ce6f0da650583545a4691d51f04ec5da0c0204997214d167c85b788d4c85236c4c3
SSDEEP 384:aAW2VTWfhCNc+bzBo3WuAi3FwN/f25rCT2LduMZ6wHWPbcb1xDtun1GrR1+4JdNE:aAW22hCNc8zQk/uhLdue52E1xG1QCkPE
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
Size 40KB
SHA256 80ab11e2aca59a9d4a710ebfcd5fb026d9a9478af4840e48a2d48521f1084c97
MD5 626d663be1211d5d58967a053f92338e
SHA1 3983f0e33eca5ab2a800763af24be85258ed8172
SHA512 3721bebf4bbe697890d03ad461a7a81ec3deb0fcef48de75b10a356b39ef505e5eb584fc285a2bd17b452202d7fc3155c9c333852f60bf0ce65dfc420e2f7ed1
SSDEEP 768:J91Lcg3GS+UWtCobnCNLZvWhE8cYhGSWq90zjiaYVQK1W9x:J9ygZ+UWtCKqUhG89g/YVNW9x
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f
Size 136KB
SHA256 73cbb0b6d9c83a076751991cf4db53e24f0a83a6124d74d5fd66cc1d830ba138
MD5 4651a4bc4ceaf8d1811aea20ab8584cc
SHA1 e9ba2c1e8b5f2391eac8fce3567c920a68391c11
SHA512 0e2552bdeed8ca32fdd2d9d90c1dfac85514ec4f54840778566b9cd37649109487473b1cd234c0195ddd17e127e185f8782914b2e7dac9bb26fb8233bf615fa1
SSDEEP 3072:a0yvW4G6/R02X3FPm2w3wiwOcNPuiQ7uaCZA:a0yNGCR/2wOAZA
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010
Size 34KB
SHA256 d623276ea41281e2c9f7f9f094f21bebdac9bb5c8d87264f75f66492d1fa9902
MD5 c5362e1ccbf0de936e5b3431d1013231
SHA1 7ca343a5e92cb2832b07980e5689e8281ada6c1f
SHA512 a4b53ccdd0fb74691952f3b1298f426de03b24b9f2df4a107a54a414a09ef34d3c658d1af039212674acc63939cf7c79927a6451059415b9e02a4ae66885d502
SSDEEP 768:6hL53I2qI/MfLNzYBvRXk7sZqLcp9WU+8vtRb8ZLUL:IL53MIUov1kgw8FmNy
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
Size 20KB
SHA256 389603813af8808ae7ec8ca4f2bc326b15e4c2ad5d86eeabfb271ac4d170b923
MD5 8266eb9d769b0040c61f9107b9233d0d
SHA1 7d84098b0f5a6b1fb73333838e071558086938da
SHA512 82854e09e38363bf682d1426cd72d2efe770a58531f8b006c80c32718229cd9699c6db6ae4afe0a5ba64504a08b16568e53ec8fdf2702b5abc41ef7711f011b0
SSDEEP 384:9DLqZ7sL+fdF02vLuZ7626skCQQ7xyveZxLOQfTCraB0HYMzZJhmxuOJ470:9DLqZ7sLyno6dsnPXTLOQ2aWYMzjfA
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012
Size 80KB
SHA256 9f7544476fac047b41e8ec0257b803d2adbb04cc43dd5d67b8e35a1bd117d9cb
MD5 a94490b8c5749a9160e41ed3d9c8850e
SHA1 dd98f8e1c72de2dd5c319e3157900843b6c195b8
SHA512 6ac1a48b6c7483b3d1494efe7d73d58993d4a2c308af0c5df9d86eb56e2b17dece72fec7e64bf0fc226a1935bfc84873bd311493719b52c656e92432739027d0
SSDEEP 1536:qWuSJNTy3Y9C+XdjBzYRlPSNrzgPjjsPg4fooQ80kaB/LgoF1bqcS4j:ZLy3YDdOoZzCj0bo/8NapgwNTS4j
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013
Size 52KB
SHA256 9d8d82e7991fcc61a74c3d5a42ea4a49a7b8f9f7f749d867f04f9cc12a0d854c
MD5 446bd19dcdccf633f68cdd36c02fcfd2
SHA1 5d0f00b79f9ed5f0950eb6e00d23be68253d78d3
SHA512 c125dddb279f2145da5a37d17c667d9c8fb2e476fcdf34c3619e6540e2b2ad605e7696f0169684f7b36bf49d8ac8c721f13581b5750ff107655ef377e2bcbbfa
SSDEEP 768:XYylgE3oxeC/ihm9aM7+6HrA6wOhurgKUERKWr7y1qCLUjua9xPCQ0uH61Lq2WL4:XpoU7m0s+MQ05Gj7Cq3y7ua1L5WLkR
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015
Size 65KB
SHA256 60233919b4b746b54ed4b2d95691a620d922f418e021a1c3ef5a257273dd61ef
MD5 11805a9271e77c23823f4c89ce3f26aa
SHA1 f416db71719ea90f0da5d25348de8b2b1114e857
SHA512 504f36a6936503e80a789951a7af3563b100e0bd1b0e97dcc7e67a5bbdc9c47401def64d6b24e127efa1fa6db366fe92b3cd4bb61ff874dc9ad7c50448235fa9
SSDEEP 1536:Yv58g9CgdPXTSqvrrvz/TuTk8/HX6l7ZM5p5IH:m580rtServz/KTkCoZM5TE
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 e0da770bcf3b9a8eada51d9e3938155aa0d0342027dedcfa2ad6d6c09e8a8967
MD5 d2ff4c6d86e1678ac159341aa788a1ba
SHA1 c416e22ad8f5a39d6c2d296858fb89dc9d5213fc
SHA512 5d926ee55e2318180cb4b4b1e180ec18f2bed2f12d2dbd1641c96f5408cc68795e6f20991930f6104606b4cece46eef09da4ee98bc920022b9d94812b228bfef
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 56a271797ee991d5803cbe3a1bf12b091dc9f9231abba5bb892b593da7cba76b
MD5 b93f45305239aa2d469f32a6428c8a19
SHA1 26e56195fb9697292cc8b37be4cbd7650fe4da35
SHA512 f9a51a71bf70a60bdafdf97a454c9d36f3d114d6b795bc468debc3f6489564755602fdcb9017a7501f0916c5871ce21d61f93b82be877fd9b22acd6b66e85333
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 bc4d51fe97195ca0ae01e198fe7b678526a44807f1fac965d0bce505659392bb
MD5 bea11a9bf11153a367a253d291f84dc1
SHA1 c0e8797e234e90b5ac1835b34fa4bbbcb443cf33
SHA512 0cc08bebc4c1c1d3c70ec8271b8cae5e2d9032aff2379894ddfd7cd736f221e2ec9fb956fac5f654c4853098c40dc9528559cb3fcb35deaaa2080b51e56c63ab
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 bb4c496798a32b092976939aa49c4784c0bcf2cdaa2dbb6038dccf83370dee58
MD5 97968529c5068767cd96659248e4a884
SHA1 fa755f757d83f077f4bd70bd737928ec214d86a7
SHA512 1e4e9fc8e452f5c2d9bbd57827ad103f00f5f6e66614f3ff04f50bf2ae229ee18a63b90ab36c637a008627998e0cdfcbf66de05dab6aaa7a31b397529637f17f
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 48c01298bc6642abe946d09133a5f87209abbf348bd3e2082613487ca85252b7
MD5 23e66488c9e6dee4c81287eef564df45
SHA1 8b45a6af0981502d3b03102a3aa53634adc99262
SHA512 16646f185cc5c1abfd6d0b8df7688ccde0c9badab4348dd78f059b477fdfd4587241b51bf8a9113f41f8adcfed9b8004b803086c8e8dc2a4ec4bc13a0e40d3fe
SSDEEP 96:nDk/Qa1LhdwpvWMoiVmdeul1XOl2lKljGltlzlQvlelXl8lq4l9/dDefRUWQyV+/:nDk/31zGWMS1Sam+PJ4S1Ev91Sprg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 39bc8bffc295ac616f3740637af5a0e96b3a8dabffcb8953a069a9a3f1c06e43
MD5 380159eb202a912c5fa9172d1ab29fb7
SHA1 285db079d29ad7a7f0e65ceec9d28ce16e2bc079
SHA512 616ae5a0450b2999ce22634f3b32dea6403630eae53e1cf9439685d0e77716095aae8ec16816d571092b002b520be3a58431ac40e75aa386673fa2a7171b9d61
SSDEEP 96:nDk/8a1HgdwpvWMoiVmdeWleX2lUlQloYl2l1lPljlslllOl2/ddefRUWQyV+VDp:nDk/bdWGWMKeKsQLandZU3i21cprg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 24f7ce68c2add92db4f25ffce5cbafaf7addb16c8119c47a6478d60c14a1b267
MD5 b8e1d66f5b38bb9b7352e9950fe7805e
SHA1 e8f52bfbeebb577838f5b6d633637cc4a342a79d
SHA512 04b52aaa6d2ecbe6224ec6a89bea3c6f66aaca9609f87ffe96508b1ca1acfb15e9ce3472f502d1c39ed7748e955aaf2da7e952c311915a2162ba282273f565ff
SSDEEP 96:nDk/Qa1LmdwpvWMoiVmdeIsXBZf+R7itpMN9M/dDefRUWQyV+VD7AiEwb:nDk/31gGWMYsxZfE7itpMN9M1Sprg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 a4cda38ae1a8c4d030cdb47b0b99e1c622fff25a1ea8dd9dba500835910ea493
MD5 47797a653cde2041e4dcd3af0944e73a
SHA1 512829a8c25d8cdaad6a4b540a9ea3014c6b87c2
SHA512 bfe1daa41e59e526ad7e49a119753029701e9a24a5d6b1a9387cfb53db5268b6e51f4a7b4d0602af741b3aafa7eb394c1e36f01530c710236b6392b3c5d2176c
SSDEEP 96:nDk/ga1HgdwpvWMoiVmdeWleX2lUlQloYl2l1lPljlslllOl2/ddefRUWQyV+VDs:nDk/HdWGWMKeKsQLandZU3i21cprV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 1021636bfe0a26ebcfa3fa9d59f6e3ed7e5b45f32faa563d132dcdf2673436d2
MD5 19cdd72656726bc922bcedad6a839ae0
SHA1 edf6cbeecc7ba89f7c522c3672c9e6e960b8f89d
SHA512 dbe63665b582d09bf2a32beb7211d2d2e5d5ee53d980948f8d1603508f88b198a58fe0455e92d22036ade6f686ee77b60896bc78bce95e325c3da8e10ae46c26
SSDEEP 192:nDk/U1VGWMddt4dDdmdqdApkdbdddcdpd8b1Sprg:nDj1oWEc54sSWxbuXvq
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 705B
SHA256 47f2d1e095ef42e136dac96a94becb11fd37c52abba525fee1a92aaf2974b1f8
MD5 3b11a2b7011d0296abc1d8a6f8033bd7
SHA1 4967d4f599a270fcdda890d490d60ae88f8baa9a
SHA512 ef648eee024d45296ad5e88b7d4520f5c0daafc935bc3672796796518d3552a57c3dc0606476b4e184f7594fae7cca833951c02ce8a2db95344e460b6b96b88c
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 705B
SHA256 6cd8f5191176644ef2b7ea2ca3767340c22ef65a3c7ba4f52b4c00f84e14b0ac
MD5 a3ef39c374804e06cab85e194d5ff981
SHA1 9ee07306531ebf42e19480c118bc38207664f14b
SHA512 5644f119d1957b4754e4f13da164e98ff35461b25b9fb88e4e0289873dcdd11f18cba4a1eb927dc31321dec25078d31d3113f2d82a79de7af7c197647994b2ba
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 699B
SHA256 c91280a90e7fd1d855f105f630d14d7fe42cca2b3396baa6afc8ae50fb29fc39
MD5 5760eef3e2b3b0e9dda3b27b61b30a6c
SHA1 6723fdcf2527fa2455305780789e664a7f9b4f53
SHA512 52eee51eea47226d295bfeff3c90e9236e40b08388188cc571f09fef65f38eea47a6cfe1c9ee9ea53ba619dd417c14fa9e40d6f0e7c2c9c248cad99380832583
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe587b94.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe587b94.TMP
Size 705B
SHA256 f5760a34995d24ccfaa15b64d86aae8fa6bd1467ca64379de7f97c53c5ee80f8
MD5 7f80634d747a105288de3d4588b7b882
SHA1 df0df676597462c52378209a63c5efdb806db7bd
SHA512 3b5c2d139579b04138e41c7300c1e1475cd0e516da23d1bd6832288f1e321b378ada98eeacf1067a4c6b43432849cea040045fbaf747f9d4b482da9973dffe7a
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 a348be4fc27476a76244b2a2a7e7223de39979b16770cd7261cfdd98d54cd6aa
MD5 58895bc4d96d4efdd352ad2d77f12b94
SHA1 96854b6bdfa09dbb530558826d304cb237223111
SHA512 62b8d5edff6ec481d2cf1db7f88f1030ba57dfbd84202c83518d17712cecc601d419957ed6c021be2abfb254232932e6f5a6a5f1646781c5f352dd3e3f39832a
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupnke2RU323IXRw5Ytj9ZklE:A9iIxuERzA83h09RZxYK/YwkLsIfn
MD5 SHA1 SHA512 SSDEEP

Submit Download