7e7dc06d509363530948acea31c46176528270cd44a547fb8ee60c92b6a9a000

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09/10/2024, 03:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
29eefdb7dd309f5d95bef6d34cf6723d_JaffaCakes118.html
Size 125KB
Sample241009-dxs8fszerj
SHA256 7e7dc06d509363530948acea31c46176528270cd44a547fb8ee60c92b6a9a000
MD5 29eefdb7dd309f5d95bef6d34cf6723d
SHA1 6f7bf389360801ee45b1847da59d89d1f0df6253
SHA512 da38e115c5d2f04e6fccd6b947acac7d86ba634ffec2a0e27d36bf51fc1b11e5d83d7f448a4dece2ae5ea54e6c1941f7722144e718c2295533275d2fbab3c10e
SSDEEP 768:h5iJEXyClEnQTC2OaH9wufDnDD9BVZfkHHjKE9l9pfF7wsG+w+iyY:hYJECClEnyCkLnDD9BVZfkjnf5w4w+ix
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3852	msedge.exe
3852	msedge.exe
4956	msedge.exe
4956	msedge.exe
544	identity_helper.exe
544	identity_helper.exe
2932	msedge.exe
2932	msedge.exe
2932	msedge.exe
2932	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4956 wrote to memory of 1924	4956	msedge.exe	83
PID 4956 wrote to memory of 1924	4956	msedge.exe	83
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 2792	4956	msedge.exe	84
PID 4956 wrote to memory of 3852	4956	msedge.exe	85
PID 4956 wrote to memory of 3852	4956	msedge.exe	85
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86
PID 4956 wrote to memory of 2796	4956	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\29eefdb7dd309f5d95bef6d34cf6723d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdcccc46f8,0x7ffdcccc4708,0x7ffdcccc4718
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2940 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5856 /prefetch:1
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6872 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2496 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6548 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6548 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7104 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6540 /prefetch:1
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,13374140207540931298,237598436491253805,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4824 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2932

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1064

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2640

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 378701e87dcff90aa092702bc299859d6ae8f7e313f773bf594f81df6f40bf6a
MD5 dc058ebc0f8181946a312f0be99ed79c
SHA1 0c6f376ed8f2d4c275336048c7c9ef9edf18bff0
SHA512 36e0de64a554762b28045baebf9f71930c59d608f8d05c5faf8906d62eaf83f6d856ef1d1b38110e512fbb1a85d3e2310be11a7f679c6b5b3c62313cc7af52aa
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c0745fd195f3a51b27e4d35a626378a62935dccebefb94db404166befd68b2be
MD5 a0486d6f8406d852dd805b66ff467692
SHA1 77ba1f63142e86b21c951b808f4bc5d8ed89b571
SHA512 065a62032eb799fade5fe75f390e7ab3c9442d74cb8b520d846662d144433f39b9186b3ef3db3480cd1d1d655d8f0630855ed5d6e85cf157a40c38a19375ed8a
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 985a53bebeda585374edf330d468093a27965c1ed599760b8dd6e17099034363
MD5 4e9aef7fd5eeaf5030539eabf176c9df
SHA1 ff870d38d897aef5152ee5f3a296ff12d8f78ed0
SHA512 a2adf5333e04a85689e3ee5e9601c1c516a48a5b0205365a76f784d2cb006a55b5cb9e8e13c87002294768ac07f7183b4104b67fd65b3f1be33989c36669626f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 3f3707b3d148a898c55a765a0be36b9897fbb41d0156c7d9889a0eb7a94f6e26
MD5 409a7072a939442eed531018d8bab8e8
SHA1 589d9ad8acd26d8a519ac2c126fa9a4db14ea964
SHA512 b779bd7fa745067857c7743a75fd19345b058b460bfe382c67fb75e469e817a6c60c8832a854f3e85ba23bdf8399f4978569b24389658ceda475020bba0ba1de
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 5c5c33b20c5299925d88ed72f32c0a81d7afd22edc5b73a0526c54949ec25b98
MD5 e9f2e882fb794b084ffd5fd2b6853612
SHA1 9b45fc20287f39ae077ba0978ed52706f338e8c8
SHA512 d839af1e7926eb52294cf961d3c43d474963aad6635422fc5dcf6e802b2701bcbfd0425d11077a8410e6f667b2e51385ff1c1cdad77ba5d929e85d1303a05f40
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 fbed0dcb1ece7b5d8484260608aa6a8d20d92678de1f56cb58d4fe160fa28171
MD5 4766fa72e53b308e6765d022ad6de353
SHA1 c50583d3e9e33148e27324a8cc506ff75dfaeca8
SHA512 73469c7ef03e3c664bb61f972f3a34800dd0ed9b1a20fa2dbe8cbe0305a2dc4306a1a4b1cd5fc8fa3bd5a570a19a32dcd2ef015d2513cf407f2248317dc53bff
SSDEEP 96:n4kVZ1t1wpvWMoiVmdeH5eagUWQyV+VDCziEwb:n4k/T1GWMXBgro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 a597ec4de4673b27d4e551fd1fc662604712d184f460d4a84afa7b1747385b6b
MD5 ee16a305d2cc4b603c8b484c851c26d3
SHA1 51ad4833c6783db4634a7e4bdde5e038cd670921
SHA512 b3f10b7593e706da5085e21f4ab8b6400c9a155ba2d4a0279c12d315f1b94e93db792c226da46151bd98bc281f7f4c9f1689b3ffb57f84384bde188e467664df
SSDEEP 96:n4kwZ1t1wpvWMoiVmde2emNbVkV5+25eagUWQyV+VDCAiEwb:n4kMT1GWMmemNbGV5+2BgrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 57afc3a73f8e392f64307ed12ee1da1067bec3e9ffce4c8ba0de700002802632
MD5 b260c810397b832a019b2304f417c41b
SHA1 6939f3abb06b72690d383dc0d189b7d906d7b31a
SHA512 b77ea676242feabc229581f5113bccd3cde5cc25f89807b867a359b33b5def53feeee17e6dc41205e48d593412dda157d3f2421b0d277bd8f0bac96bc7f50f82
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe580191.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580191.TMP
Size 874B
SHA256 d2a30d0df08ff9b2bb676b675ce40f24501848fb934e0f5546a2ae3c66bf301e
MD5 81b00c7575e5cffcb9e0b5e26ce26772
SHA1 c12b05ee762fec068fa8920561d623495576dd20
SHA512 7dd3c430b0dccf9e4ac4b3ad6dffec4f99f1e603e85eaf0406cb3878c15c2c7c06a675e34944234838828f3beb03927540faa756af3f53bc83386e4be9350602
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 f55e776a7721f56e99b5d6c86e08ecc80e24a6c22824c302c887f4df22c9a7de
MD5 434608e65c960ae19f9ab741f4b04d53
SHA1 bc774e534579b6c9901e16507235543cf684730d
SHA512 bdc15a1e3696fe063f65603736ef1b2b8d9c5bb310991d2a2cd7756113dd87d17ac917624bea3bedee15ce16a5400b333b6a03dadeacca5dc94540cfb5271a17
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupwe2RU5hLkyoZv6+B1EPoGu:A9iIxuERzA83h09RZxYuWJ6ZVbEQGu
MD5 SHA1 SHA512 SSDEEP

Submit Download