fae767bb6c9b88921a206c89f8bda0f13edd5f2950b02318452cc3404b49ba54

Analysis

max time kernel
146s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/04/2024, 07:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
deed0d5cc74a9aa889126b623a197af2_JaffaCakes118.html
Size 41KB
Sample240406-jb9wzaeb95
SHA256 fae767bb6c9b88921a206c89f8bda0f13edd5f2950b02318452cc3404b49ba54
MD5 deed0d5cc74a9aa889126b623a197af2
SHA1 d9512f8fb49065647ebbab5d380ee44f164568e0
SHA512 2ad54662103adde5d973fb1af0453530dc3b9b3eaca56a15c412513ac7bf5fbf390e0dc03cf8057fbfa84bf9feb2e766ddb2a17b09f3407c51e9499aba8872d3
SSDEEP 768:bkcluTMoagGbKRf6xpw6d5QwcwN+1F32xmj:bkclJ/pKRfz6dn+1Fz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2508	msedge.exe
2508	msedge.exe
3024	msedge.exe
3024	msedge.exe
4516	identity_helper.exe
4516	identity_helper.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe
3024	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3024 wrote to memory of 4928	3024	msedge.exe	86
PID 3024 wrote to memory of 4928	3024	msedge.exe	86
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2784	3024	msedge.exe	87
PID 3024 wrote to memory of 2508	3024	msedge.exe	88
PID 3024 wrote to memory of 2508	3024	msedge.exe	88
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89
PID 3024 wrote to memory of 1180	3024	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\deed0d5cc74a9aa889126b623a197af2_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa60c846f8,0x7ffa60c84708,0x7ffa60c84718
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2660 /prefetch:8
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3108 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3136 /prefetch:1
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,9963179486790064379,17268009356022048040,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5560 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1852

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4496

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b54b41e7ce5600bc653aa7c88abb666976872b2d5e2d657bfc1147a0b49e9d74
MD5 fd7944a4ff1be37517983ffaf5700b11
SHA1 c4287796d78e00969af85b7e16a2d04230961240
SHA512 28c58a2ccf39963a8d9f67ea5b93dbccf70b0109b2c8a396a58389cdec9db1205523a95730485bcbc9d533867cbf0e7167ad370fd45740e23656d01d96ee543b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 01946a2d65e59b66ebc256470ff4861f32edee90a44e31bf67529add95cafef4
MD5 a774512b00820b61a51258335097b2c9
SHA1 38c28d1ea3907a1af6c0443255ab610dd9285095
SHA512 ce109be65060a5e7a872707c6c2ccce3aacd577e59c59d6e23e78d03e3d502f2707713fda40a546ed332e41a56ef90297af99590a5ab02f686a58bcbf3a82da1
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 d91b2ee01f0e0184df4f8d07c8af079f41887d026c916dd5d774b3d755092928
MD5 be0ba9ee4366c2c44eaaf6cf5526d80b
SHA1 e9d774f60608ca211165ff44f9deb8d1d916cd20
SHA512 cb2689bb024482056e8343275ae700802bcb32c7f229dcaf5ecd5b5df33cdf89249c166c1a0d183f1d61964df275c045f714f6844b3ff498900f896f23a6ec28
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 d274af2c7f63778429ef18b69a82f7609a55a06fd5635cff0351f2e44d0f6145
MD5 cc1e0fce552565040412c3be366ff3a3
SHA1 59e8c999f7f2118e010f3c263df9404f4f850ab3
SHA512 5bd636fcef3029502c1517a6e7b484ebcd9b0b20af5758c5f511ac70e0593136513772e1f51c0e74052f11ef85c89f2e6a7ce68f994ed08126014b3d239e066d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 459ff8b82f38a2d478e833c9d0d1eb8603783dcba0c0afa6e0d689698997dcb1
MD5 0e5d4517e12c52d844c4d4cc8d47aea1
SHA1 d021b3c35ed30b4b15363b1d4bd5ab97cb39cdc8
SHA512 fe69616dff951d31492c1ab732d08fb5c63fad2fb86495bc15affa084c735b59985af4abd00fc792112ad0268b45c057dd9a33e355bcf7b0469504bde433f020
SSDEEP 96:nqk/eY1aH50wpvWMoiVmde5ZDmvwKhe6y2IBqUWQyV+VD7AiEwb:nqkxM50GWMJZDmvwK86y2nrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 68e66ea8da38ab0c47810410b47f491d22ebc8f060856e8b010cdcc9ade479a0
MD5 73e3f9e9aa05db55742a12d58e175538
SHA1 e748d24db7d268a8375652efa6a5cb29a27c93c0
SHA512 334de11456e634ac68a77e2310f72dce33b70befad012fc7c41069570d677d214a017ec720755e0f22a78de453d6ffe8881c8d8e94a5764d1d519c287885c83a
SSDEEP 96:nqkoeY1aHp0wpvWMoiVmdeHI/qUWQyV+VD7ziEwb:nqksMp0GWMXBrt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 6c6af09dac656308dde61ae34e10218190dae7823f140e9dde42568749017d1e
MD5 dde226d0eab40c298923b90bea63b419
SHA1 bcde100ad559dce9dfbf3550c3893d2e4ece6d68
SHA512 29f085b67aa15e7a534805ca3a6554cf504180628217ed7303f422e323181b7eb4163bdd5d96228d0cd07e9f88367b4013eaa5611d31fb407e645fb873a27f38
SSDEEP 96:nqkDeY1aH50wpvWMoiVmde5ZDmvwKhe6y2I/qUWQyV+VD7AiEwb:nqkVM50GWMJZDmvwK86y2Brg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 86291f91eea1df492a0f9550a0c63da2e6f22a75905616935f1b2ac0a8b86e33
MD5 7d5dfd36024f2880edd23d5b4aa07bc5
SHA1 2499d0c2c9f5fa1161863c470bf1f06be4c24603
SHA512 f5c51e3760e9a6f041f5c726b3640842ba0b681035dd1ac266633c5e8e02d4648f54574710a9a176af743d4fe01f76ecb4d56fa3ba569cc3514616983f9833d4
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupH/e2RUzAw+NyblnxvFt2pH:A9iIxuERzA83h09RZxYnJ9inTt2h3Co/
MD5 SHA1 SHA512 SSDEEP

Submit Download