f7f5378fe044a53f5c3909c63ddfb7ff0c6834a7c2f25bfa93cb80b96998251a

Analysis

max time kernel
145s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
03/05/2024, 13:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
10aa9832560cf11d1e1b1bbe6b0c9505_JaffaCakes118.html
Size 46KB
Sample240503-q2h99sbf63
SHA256 f7f5378fe044a53f5c3909c63ddfb7ff0c6834a7c2f25bfa93cb80b96998251a
MD5 10aa9832560cf11d1e1b1bbe6b0c9505
SHA1 9c808b57015258f8951498c9cf65ade384ec3e90
SHA512 793105f30d16a01ef85a8b6afbeeffc6c06b26033c7ca99c3627638ba9527c77b7f060941468d829069edfa218ff79ea5ebb1f2985690a23b3e1517003e9c907
SSDEEP 768:okiLn1BXMb2NMa2dzyMqWfBvLcseo4smNeUIKiTtGLQ4R1ecN6gM38oVu+cWa4:ZiLn1Brwzy7WJp+45KiTtGLIcN69HjH
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
384	msedge.exe
384	msedge.exe
4624	msedge.exe
4624	msedge.exe
1588	identity_helper.exe
1588	identity_helper.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4624 wrote to memory of 968	4624	msedge.exe	84
PID 4624 wrote to memory of 968	4624	msedge.exe	84
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 1716	4624	msedge.exe	85
PID 4624 wrote to memory of 384	4624	msedge.exe	86
PID 4624 wrote to memory of 384	4624	msedge.exe	86
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87
PID 4624 wrote to memory of 704	4624	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\10aa9832560cf11d1e1b1bbe6b0c9505_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8130f46f8,0x7ff8130f4708,0x7ff8130f4718
  2⤵
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,15463143000828118864,10901773622721209342,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,15463143000828118864,10901773622721209342,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,15463143000828118864,10901773622721209342,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2892 /prefetch:8
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,15463143000828118864,10901773622721209342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,15463143000828118864,10901773622721209342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,15463143000828118864,10901773622721209342,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,15463143000828118864,10901773622721209342,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,15463143000828118864,10901773622721209342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5144 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,15463143000828118864,10901773622721209342,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,15463143000828118864,10901773622721209342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,15463143000828118864,10901773622721209342,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,15463143000828118864,10901773622721209342,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5728 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1980

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2284

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c550af5ba51f68ac4d18747edc5dea1a655dd212d84bad1e6168ba7a97745561
MD5 2a70f1bd4da893a67660d6432970788d
SHA1 ddf4047e0d468f56ea0c0d8ff078a86a0bb62873
SHA512 26b9a365e77df032fc5c461d85d1ba313eafead38827190608c6537ec12b2dfdbed4e1705bfd1e61899034791ad6fa88ea7490c3a48cdaec4d04cd0577b11343
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 0021f72dbca789f179762b0e17c28fe0b93a12539b08294800e47469905aeb51
MD5 fbe1ce4d182aaffb80de94263be1dd35
SHA1 bc6c9827aa35a136a7d79be9e606ff359e2ac3ea
SHA512 3fb0a3b38e7d4a30f5560594b1d14e6e58419e274255fb68dfe0ca897aa181f9ce8cb2048403f851fd36a17b0e34d272d03927769d41a500b2fe64806354902f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 676182c98a48addcb15bb53c52b08b997d7debe52252fbd51a9fa50555ac2c55
MD5 9bfd0a10099954d631799553d78db95d
SHA1 534672f17232c27939609006961722dd546a3baf
SHA512 ca87be3f684f20f9808bce1d7137717c46ddabe8c4e6dbc841c86b6bd3fe80642e0a08b6fa52407d860f18c88aa33bfc38e5a0335a4d2ae5d2060d1836271ae4
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 53c6616accf5ec5f02b7ff91b407f344b6cab095bc6d4dfa7ea00194ed82db5a
MD5 ff705c2ac1c6fdbd94b1bb18127ea59d
SHA1 2f31efb25e9f74296f784b52e1e3e964f12de475
SHA512 270e9448b0ee27853c54513d74abac31e1cab4d85356e813dd4ceb35d5dfa3e08ebdf717409d707103ed2b745d9499f67ee49f8ca13678b916f6688668cea10d
SSDEEP 96:nHkNO1WuniK1wpvWMoiVmdeHdt7gm+UWQyV+VDCziEwb:nHkwIBkGWMXbMm+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 ceaa05be53c653138a4b18b9c507f2f386b617cd92ac3317454e6bcd392d18b1
MD5 1f040a672f166e191471bb505fe55345
SHA1 b62bd02e48edc742172f0b14231adaf5a6b1fd32
SHA512 296dff9246a1bd0538c041aa1751c431e8604ef7dd0dec09814aeb04fa225b4beab7daa7cf146ad2f77d9eb9aeb24e3a833a0250bcf0854cc0053b49bcd28052
SSDEEP 96:nHkIO1WuniK1wpvWMoiVmdeHdt7gm+UWQyV+VDCAiEwb:nHkTIBkGWMXbMm+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 d7ad5d8d000b473c8c891624ae194d404dd13157ed126071f8e81a16a0d1c9e6
MD5 187118b4fe0811d8c8fbdface99077e9
SHA1 b562cf7a52ad9aec478ee5e308412f857d423480
SHA512 acc369c661ce638b4a57f38c13c7f584b7dc5db0141169c59f323ae88c0973486ea92abbfc5d093031b401c855476e4ebbd8126cac93076ca414505ae756b60c
SSDEEP 96:nHkIO1WAniK1wpvWMoiVmdeqzEW88GiTpKE2dt7gm+UWQyV+VDCAiEwb:nHkTInkGWMaYW8EtJ2bMm+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 543da0ec24adb12d05df4094026500e0a4bf2408e3396126507c67c803802c11
MD5 89db02a99b66575ed30c9cf1076379eb
SHA1 cf7842590cce950041f99f26ed4ff170d4d6df76
SHA512 fc254fb3cc18141543c4f72deee96749e8cbc7be89162f5d9c4a55fdd8d4f821d4679b0a61dfd7fd8a3638b46a4ddd04e163c9f8aae4a59d7953fa4139f62675
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57bedb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57bedb.TMP
Size 204B
SHA256 d5489ad52c2b1de432112103cf43ab5b86780515b8aaba064c7cdcceeda69baa
MD5 40132b5cf21ffd3dbe4a39f7c284e700
SHA1 be1ac53fc4d033272e9a8e8f748649cf955f6088
SHA512 71b1dd48b75a67f6b6b20c6f16350bbd3dbe1dd2fb0957d9faeafebb935fe46e5115641c7e6afbde81091943ff454b0a5fb37b10d4231c4a68909837a4a85f48
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a5239af5370bba0be829a2c991829b12ba493cce8c8f151472f7bfe8dddb0d3d
MD5 2ca2562d376108bdaa840eca5d3c0401
SHA1 3553d5841db371aa725fd5e755608798b5000cee
SHA512 20968b949493f7c508dd396c7c7d841ec80a55096ed5b7aae004f5a453470a29ea3c1840f57c12166a04ac2f038b4a5dd8a232d8b6dd30a7e1a10a321a7050fb
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupQBcae2RUqOigs+OblfBhDi:A9iIxuERzA83h09RZxYyxgs/XDafEBU9
MD5 SHA1 SHA512 SSDEEP

Submit Download