218cb5b6a94d35d335ef69477588ac676d656308020221f640b3eec385431f77

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22/05/2024, 01:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
657fe670b6950241f4a127e9691fd082_JaffaCakes118.html
Size 54KB
Sample240522-bp8basga21
SHA256 218cb5b6a94d35d335ef69477588ac676d656308020221f640b3eec385431f77
MD5 657fe670b6950241f4a127e9691fd082
SHA1 5b61068ad0a83c7b644ad79ff86fa389bd11f072
SHA512 0de164eed715e0575147d64a1bf400d103f6c27c4f081cb58268ea70f3aa3373807d09ad19f12d4128d9937e11a21303d779074b5831534152eedd0cf1368d82
SSDEEP 768:1laJFPWr9dgJgG0H+hRS2fwwIsbaIHNDt1ozObMT5:1laJoCJCH+hRS27QItDt1ozObo
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
1236	msedge.exe
1236	msedge.exe
4380	msedge.exe
4380	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4380 wrote to memory of 3476	4380	msedge.exe	82
PID 4380 wrote to memory of 3476	4380	msedge.exe	82
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 4664	4380	msedge.exe	83
PID 4380 wrote to memory of 1236	4380	msedge.exe	84
PID 4380 wrote to memory of 1236	4380	msedge.exe	84
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85
PID 4380 wrote to memory of 3632	4380	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\657fe670b6950241f4a127e9691fd082_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0xd8,0x7fffc8f746f8,0x7fffc8f74708,0x7fffc8f74718
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,18260192004469306671,12900722178083127441,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:2
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2156,18260192004469306671,12900722178083127441,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2156,18260192004469306671,12900722178083127441,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2980 /prefetch:8
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,18260192004469306671,12900722178083127441,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,18260192004469306671,12900722178083127441,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,18260192004469306671,12900722178083127441,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,18260192004469306671,12900722178083127441,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,18260192004469306671,12900722178083127441,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,18260192004469306671,12900722178083127441,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,18260192004469306671,12900722178083127441,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,18260192004469306671,12900722178083127441,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,18260192004469306671,12900722178083127441,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,18260192004469306671,12900722178083127441,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1952 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2564

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4188

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3136

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 704dd4f98d8ca34ec421f23ba1891b178c23c14b3301e4655efc5c02d356c2bc
MD5 4f7152bc5a1a715ef481e37d1c791959
SHA1 c8a1ed674c62ae4f45519f90a8cc5a81eff3a6d7
SHA512 2e6b02ca35d76a655a17a5f3e9dbd8d7517c7dae24f0095c7350eb9e7bdf9e1256a7009aa8878f96c89d1ea4fe5323a41f72b8c551806dda62880d7ff231ff5c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a7abb51435909fa2d75c6f2ff5c69a93d4a0ab276ed579e7d8733b2a63ffbee6
MD5 ea98e583ad99df195d29aa066204ab56
SHA1 f89398664af0179641aa0138b337097b617cb2db
SHA512 e109be3466e653e5d310b3e402e1626298b09205d223722a82344dd78504f3c33e1e24e8402a02f38cd2c9c50d96a303ce4846bea5a583423937ab018cd5782f
MD5 SHA1 SHA512

Submit Download

6fa04094-90d2-46fa-9a46-dc68afae1532.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6fa04094-90d2-46fa-9a46-dc68afae1532.tmp
Size 6KB
SHA256 c7ff07d8a6ba61ca8d5c5ead3d2e1f0f6448102c64085ab3461231eca40736e0
MD5 acf6f5db116d0e2f1e2bd82e92c6c6a5
SHA1 2790bceef511bc2683806f2e309d85487e277f05
SHA512 41828ad5063552c83d06db577dd9283275ffe05167cc2c979ab48e9fcbb21021d8eef08e5559b354c2798b1531c02b8869eba08c557f5372614827280860b8ed
SSDEEP 96:nykhH1iQn3XwpvWMoiVmdeJygWPu2p1kv/UWQyV+VD7AiEwb:nykhN3XGWMZygWPu2p+/rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 13f0ae28c4145264cc71ff7368ca1c845e2736e5b0ede29b8f964a69d7ad9b12
MD5 b799af70aa57a194f4222d23b052cb68
SHA1 51b54c70b2cb8208a7fcd8db7768596eeac70dd9
SHA512 eb4c674309489cae9799c51d34844642f378e30e12ecb6e5f5a2dba1d5babf545c92ac39b19ef4c0ad6110233e17f77233545433a273a8cd92a591dd14a55614
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 75a16121917eb6b37ff4c8aef11327c3fa35a7f3b1812ad4d07ebf89e2606f0f
MD5 332056a6791b0d806f211397ca5d15fb
SHA1 a1af31cf09dbc3a932664203ffb0ad67ed7f4ea5
SHA512 a1a7512cf25e4d01afe343ffd0faa8d322c164f39f65b606f670c43e0cabc4c32d55c9965bbf0a6588b604f60a2d8ade7cadacf02c86378559c5a09f1c315445
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 373f582d34fad8d487c4da88bfedbaeb6a61e90f9b886ce0beea3fc59d1dc06d
MD5 a5e019868376106a2627a753210d6ed4
SHA1 2c9d7327f9907fc9c3859673e2357137b846af58
SHA512 e13f6dd52b777e7b00e5db9d03c26d92ed4518702ca543a02fdc6ff77b0d78dea55196698edbd0eb2be53371dcd90816c6140bc4fb4e78b61220e3eae23cd69f
SSDEEP 96:nykKH1iQ33XwpvWMoiVmdeHp1kv/UWQyV+VDCziEwb:nyk4NnXGWMXp+/ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 cb840cdaf598e50b23a77bee78e973a4b867f7912c8c8635c86e9f37d19463dd
MD5 6d2d0d8ad34f32e6e8f115e4c832b694
SHA1 efbd58006250df7db949882e07fd16a2af82f603
SHA512 576727a2ce9c61672a11c118d9a974b722b907df9d8726b4d1a60cda929f47bf55b41a3a6ddcbf2fc6eb66caef0f7258a2579033f2f300c9d12a156cba1516c3
SSDEEP 96:nykhH1iQn3XwpvWMoiVmdeJygWPu2p1kv/UWQyV+VDCAiEwb:nykhN3XGWMZygWPu2p+/rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

c6799632-99ca-47bf-83aa-3cc54fb0ebb2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c6799632-99ca-47bf-83aa-3cc54fb0ebb2.tmp
Size 11KB
SHA256 918bef8baad0a81567bea67d17e46e453857b90f2f2e3004d68b1b887333955d
MD5 d95d91ba0e371a3548b790f3744b221e
SHA1 8b55135d909bab8c0f4a5e7a76c9434ba1505416
SHA512 3d90f81a4f66c7c57bde335c27577c49e97efa41d3e2042c7e3dae7bf271bd1b829e64e9ae676d23e763764a718017fd0a8226912459217ce1f5b8d767a9793d
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupx7de2RUTo5d3z2OMDCRHqV:A9iIxuERzA83h09RZxYxVVdaOMWRHqlP
MD5 SHA1 SHA512 SSDEEP

Submit Download