e6ba18cec1fee00ce5840ff983699776db1df39df07e073606e150a638acc377

Analysis

max time kernel
146s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
28/11/2024, 16:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ace35f9523947097cf04ea492e8d5f6a_JaffaCakes118.html
Size 105KB
Sample241128-tk3t5ayjbl
SHA256 e6ba18cec1fee00ce5840ff983699776db1df39df07e073606e150a638acc377
MD5 ace35f9523947097cf04ea492e8d5f6a
SHA1 2b88b3b627902becf1b8b3a7eefcb203a97b3e84
SHA512 62d0bc4f5478b29232552f8f686e52b2b5d0ba4144488748ced6e033330a1a5dc01b5caf2ab2e7f86d8403d7b76d516ded4e6378e4a6717ce17492c0161fa3db
SSDEEP 3072:7YoYdp9jzO4cl3Pjod4hyod4hgr/hZtMEo:7YoYd324cPBdo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
216	msedge.exe
216	msedge.exe
916	msedge.exe
916	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 916 wrote to memory of 4728	916	msedge.exe	83
PID 916 wrote to memory of 4728	916	msedge.exe	83
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 4844	916	msedge.exe	84
PID 916 wrote to memory of 216	916	msedge.exe	85
PID 916 wrote to memory of 216	916	msedge.exe	85
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86
PID 916 wrote to memory of 1788	916	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\ace35f9523947097cf04ea492e8d5f6a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe485646f8,0x7ffe48564708,0x7ffe48564718
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,11189213060408643256,2781696195617239772,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,11189213060408643256,2781696195617239772,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,11189213060408643256,2781696195617239772,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11189213060408643256,2781696195617239772,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11189213060408643256,2781696195617239772,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11189213060408643256,2781696195617239772,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2304 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11189213060408643256,2781696195617239772,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11189213060408643256,2781696195617239772,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11189213060408643256,2781696195617239772,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11189213060408643256,2781696195617239772,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11189213060408643256,2781696195617239772,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,11189213060408643256,2781696195617239772,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1776 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4220

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4484

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2160

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2072

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 58d66151799526b3fa372552cd99b385415d9e9a119302b99aadc34dd51dd151
MD5 0a9dc42e4013fc47438e96d24beb8eff
SHA1 806ab26d7eae031a58484188a7eb1adab06457fc
SHA512 868d6b421ae2501a519595d0c34ddef25b2a98b082c5203da8349035f1f6764ddf183197f1054e7e86a752c71eccbc0649e515b63c55bc18cf5f0592397e258f
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 ae671613623b4477fbd5daf1fd2d148ae2a09ddcc3804b2b6d4ffcb60b317e3e
MD5 61cef8e38cd95bf003f5fdd1dc37dae1
SHA1 11f2f79ecb349344c143eea9a0fed41891a3467f
SHA512 6fb9b333fe0e8fde19fdd0bd01a1990a4e60a87c0a02bc8297da1206e42f8690d06b030308e58c862e9e77714a585eed7cc1627590d99a10aeb77fc0dd3d864d
MD5 SHA1 SHA512

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010
Size 20KB
SHA256 e4fea32bac89d9ad34b13a25b0b4da1321920b2c6be2cabb75ff91bf6109152c
MD5 4b3121a05808b99aa6e0cc12924f77db
SHA1 ee5805bb76c384d1e1667aea2976bd2f4f94c7cc
SHA512 9b83d55691b41d2a45a542d163c1b6a47208969720ec1fd15233f29ddcef2243e79895cfcb008767f91b3d1cf3a6288248e8b1ec50027eb96db04cde56cb2605
SSDEEP 384:R9uPagxu9HwpUsgANgyyEYVCdWByqa+bbovU39NDN6sM2E9NkLI:VwkANvR5qaWEvUN9bMX9mLI
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 4704eafa6a7c5b2ae9eb3a90e8f994ce9c2388616c234e7fd58a11e20108e18a
MD5 f64e2c18856456cb16018e868df8c34b
SHA1 1d9122c8337665580fe76367e199eb8da4838f10
SHA512 db76646b26bd9ed6180f4e114793482aaaa2ef5b759037128bb054482d8a32ea921952e3658f66d3ee27b58d0dd649e6ba2c64e2a7f5e1f9c23170a35982f72c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 5c667c7f2f6c00610c14b6a2d35485bd8478d2163c470dab1f8e667743766dbf
MD5 3dc2c3aabbbcd7e86021e7108d345ed6
SHA1 28ed052ace700e4482bf7d990cb989042ffe0ee7
SHA512 cf5efcc68b327813074ae5aafd5eaf2c43547bac9d39ce63b92f0729bfe7cd141cf7b6611384968e84568754419379753ee19c860bec034b57325a8a3d16555a
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 8a98f8f7ca922547210fe9cb42e0ec0718e862e38a70b53176bacd75559bda77
MD5 1c93aa5f3125e8451a985d4c9feefb5b
SHA1 8607b48ada6d64a40f7b949854a1eca05ffae97b
SHA512 b680c01c9f9949af3c37ca170feba3a838c4e95dec31bf451577712d276cefb98c8e75e846d5ad4792f0c10a38f87fed3cc39461f4dfe40bac04a24ae208c223
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 9917d25b310bf0b8d2d563c1b308e6f4754ea2bafd2aaaae77fb6a2fcbe4d774
MD5 375ef975abaafe0c5aa5d9e7dc876282
SHA1 17052d7d3866602d31b2621e366795f46eaa06f7
SHA512 79ec4d45b7edb99eaa054291cf651bbd5ef95f93814e1d5ae6f15542e54cddbc006f8467e93ce04b050aef3291e4073b19418eed062eb016a7fd8ed19066fdb2
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 2b936fcb22bce628f7ece7a872ca3491a83232cab1eb4c2e61ee5d124bafb646
MD5 2f719c67f59f72f9003fbe38710dd84c
SHA1 8f54951c127b9bbe7d86c0a228a28adca9802360
SHA512 bc2af1c065caee136eb2b715b5cb89a157539528d0cb681dc98688de5163bba8eb80d01b2cc4c10d921829598f29c04d9cec1983da81b76e846b8d403bf3e5b3
SSDEEP 192:nykYeVwGWM6rONQqSn83YqECJmPErG2x+rV:nypeVNWterr6
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 13facb6f8be33ceddc3a88dcae5e96a352948f0908eaa0ae97f666d041e3d385
MD5 f2d7c815fba7a05bbfa72c77093b7a24
SHA1 49015ddd7843a752fd1ca46529c68c771035a5d1
SHA512 c14cfd5a9fb470dd649383a6e8b82e38ca4daa520d935bf99000f3159ce0c43c66287ada5e841c7c199fbadd68ffde5ead827d219549cb18acffef73bb8ce8d5
SSDEEP 96:nClkpSpQ1NKNwwpvWMoiVmdeH7Ck7Ns+UWQyV+VDCziEwb:nykveNwGWMXY+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 de42cb709fc3dc6539204a3b41fd09f5dd2e21110858e4680a10819d7d750d92
MD5 d0b0b2377166c9a0df04f94aea8eaa54
SHA1 80e9f6a21f28c9dba62d4eda2a78bb370c5eadca
SHA512 b7a9ad0c6deb6bbb4e709f92ea7eb1212fa04088caa5ed4b32f0f363cc62c2d097434dafb7e62791b3997c18ecce3015883c6266500d317b6c6508428b60c595
SSDEEP 96:nClkUSpQ1NKNwwpvWMoiVmdeC9lEOlcm27Ck7Ns+UWQyV+VDCAiEwb:nykYeNwGWM6OSj2Y+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 faa28efa07dbcddb32084ae2f72d9afd68fd8ce9223f9896eb417637a641ab7a
MD5 1066fe487388d71ebbbc3d5aba27dd01
SHA1 7fefbb4b3b959295ccfe601e83b6f884d3042646
SHA512 4124df00fe802c1f69477cd478b4ddf23c672986869aa08bafb051b5db8b3f8bf6e125e6e522cacf1575f80f81172fc17a2d1cc5de7b02aab8b23447e5ec8fb8
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 561f0974bf1d460d4e735e1dd3ec449e0ba716aada898c979052e76b70f6aa8e
MD5 80f1680881d3bd7a56249d8673be7f58
SHA1 cb213c3295b558728693ae67b8decb2b0dd83471
SHA512 4f3c7f4b5504851c42c28896924194dfdd086ec68c6bdcc4d6c1114f29328b39dc33b904c9c8a8991492dd98e88e9bb113b3aef7fdadf27c795c214883076529
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe5854e1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5854e1.TMP
Size 538B
SHA256 ed04dde00fdcb532afa646744f9193e0fcdd9c6154d0d83e52de4bb736908616
MD5 a41fc8df7d40361107a82d5ecf5c99d6
SHA1 e3719546425dee1dda18cd79e02084d3401cf178
SHA512 09e69f41c3bf706cd16a087596cc5e7fc1ce1d1ad2455d64a22d784c65d9e80e6877d2dfd107083b04f5d9e2889fc3cc5458266b4f57236a80b98ffdd2840193
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 e70c1c7f2d88657b046bf58edd720f9728fb4e08e195886e9d58795d924d260e
MD5 81d16d0a992778e71867a62967383821
SHA1 ae6b16911b965540dd8bacda7e875f6e6124b6e7
SHA512 9a6e0f93340ecbc0a1cdcde8d699d11258fe8e715ddcae26e2ff566b002ac36d52ed2db212a669519783b1d13a4286600407d80885032a4914fb5f68f8d00a4c
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupt51e2RUC/4nDFYdF980JQB:A9iIxuERzA83h09RZxYt5xTmFYi0YKu
MD5 SHA1 SHA512 SSDEEP

Submit Download