Analysis

  • max time kernel
    145s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/05/2024, 07:46

General

  • Target

    7ffcc19548c798225c9c306df9cdedde_JaffaCakes118.html

  • Size

    51KB

  • MD5

    7ffcc19548c798225c9c306df9cdedde

  • SHA1

    ad69f061f458e4681276b39277195c4e340330b1

  • SHA256

    692c9f9bc064d90dfe64814493ceaf5e2a2d38ea70ed153fa147e4e7ff49ceee

  • SHA512

    b90fba05e76fb52e70e137a72d9745c55afad8c3b38cc08aba9dbdaf99468501d407630368fa9aeec94d599fe644f970cedec9dee7b5e1081b0b29d167d6f617

  • SSDEEP

    768:5DT0EipB31xa5MkOpzWBW5Gxmz3nUQmyERu33Y29+J+:NTupB31xuMkOpzUoGPQMY3p

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7ffcc19548c798225c9c306df9cdedde_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4828
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa94c146f8,0x7ffa94c14708,0x7ffa94c14718
      2⤵
        PID:2368
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2236 /prefetch:2
        2⤵
          PID:3596
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:1148
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2752 /prefetch:8
          2⤵
            PID:3924
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
            2⤵
              PID:1972
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3456 /prefetch:1
              2⤵
                PID:1912
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
                2⤵
                  PID:4432
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:1
                  2⤵
                    PID:1976
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
                    2⤵
                      PID:3084
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
                      2⤵
                        PID:2232
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7076 /prefetch:8
                        2⤵
                          PID:1692
                        • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7076 /prefetch:8
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:4160
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6468 /prefetch:1
                          2⤵
                            PID:888
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6548 /prefetch:1
                            2⤵
                              PID:4592
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2800 /prefetch:1
                              2⤵
                                PID:5168
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6428 /prefetch:1
                                2⤵
                                  PID:5176
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2208,12529451863304015245,8542606636931858914,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5660 /prefetch:2
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:5588
                              • C:\Windows\System32\CompPkgSrv.exe
                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                1⤵
                                  PID:4940
                                • C:\Windows\System32\CompPkgSrv.exe
                                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                                  1⤵
                                    PID:1708

                                  Network

                                        MITRE ATT&CK Enterprise v15

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

                                          Filesize

                                          70KB

                                          MD5

                                          49aebf8cbd62d92ac215b2923fb1b9f5

                                          SHA1

                                          1723be06719828dda65ad804298d0431f6aff976

                                          SHA256

                                          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

                                          SHA512

                                          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

                                          Filesize

                                          893B

                                          MD5

                                          d4ae187b4574036c2d76b6df8a8c1a30

                                          SHA1

                                          b06f409fa14bab33cbaf4a37811b8740b624d9e5

                                          SHA256

                                          a2ce3a0fa7d2a833d1801e01ec48e35b70d84f3467cc9f8fab370386e13879c7

                                          SHA512

                                          1f44a360e8bb8ada22bc5bfe001f1babb4e72005a46bc2a94c33c4bd149ff256cce6f35d65ca4f7fc2a5b9e15494155449830d2809c8cf218d0b9196ec646b0c

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

                                          Filesize

                                          328B

                                          MD5

                                          df716bb362c133a2b439a441087e483c

                                          SHA1

                                          445b3d3959dac011ba274ff41897946030508fd1

                                          SHA256

                                          a4d57bc504dcf79b109a9bbff1f34a2140cb34838d7e3bb86dfa0dd74ff34f16

                                          SHA512

                                          7c56406a04d989d2bd493b0a88ed8a633683d80d08d0c51ab6fc28d7cce7a4aa073a1d23dd413acf71041a7d9179bc84b91ed83b7142370a9740e3683e1ed2dc

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

                                          Filesize

                                          328B

                                          MD5

                                          67145bb64308f770b5ab372d41e6be20

                                          SHA1

                                          27e287cc137d5f433e9739dc2f44a931f5f03162

                                          SHA256

                                          afd70e6601078b5e5c8de8a20f0a32a5a145c51693a67c9cb1717bc5f454eab1

                                          SHA512

                                          d73a79e9e00648e41022e7c3cb9516d1d47c2e01174443ae4ba83d835e0a0f7ad8fc2606fac17f7e7ee88b0d20f072cd81c7929ee4d50cc8438616b744f24598

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A

                                          Filesize

                                          252B

                                          MD5

                                          118e4c0cf37b19290bd395cf9fabe6d0

                                          SHA1

                                          da61a985681b6126d579b772be9dd73a5acf2d41

                                          SHA256

                                          450ee9444f9123934046d2906866283461131660d69e2a392ad00a137a648c07

                                          SHA512

                                          2d86c71ba374d720904c802ba5e37e869c42ab94089ff700876b0e38de4bbf2f2c69d6ed5c6f5ddd4733f2090e46d1e2867dd38af92324141303c5197afd6129

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                          Filesize

                                          152B

                                          MD5

                                          4b4f91fa1b362ba5341ecb2836438dea

                                          SHA1

                                          9561f5aabed742404d455da735259a2c6781fa07

                                          SHA256

                                          d824b742eace197ddc8b6ed5d918f390fde4b0fbf0e371b8e1f2ed40a3b6455c

                                          SHA512

                                          fef22217dcdd8000bc193e25129699d4b8f7a103ca4fe1613baf73ccf67090d9fbae27eb93e4bb8747455853a0a4326f2d0c38df41c8d42351cdcd4132418dac

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                          Filesize

                                          152B

                                          MD5

                                          eaa3db555ab5bc0cb364826204aad3f0

                                          SHA1

                                          a4cdfaac8de49e6e6e88b335cfeaa7c9e3c563ca

                                          SHA256

                                          ef7baeb1b2ab05ff3c5fbb76c2759db49294654548706c7c8e87f0cde855b86b

                                          SHA512

                                          e13981da51b52c15261ecabb98af32f9b920651b46b10ce0cc823c5878b22eb1420258c80deef204070d1e0bdd3a64d875ac2522e3713a3cf11657aa55aeccd4

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

                                          Filesize

                                          22KB

                                          MD5

                                          5e74c6d871232d6fe5d88711ece1408b

                                          SHA1

                                          1a5d3ac31e833df4c091f14c94a2ecd1c6294875

                                          SHA256

                                          bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

                                          SHA512

                                          9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                          Filesize

                                          264B

                                          MD5

                                          14ca7e49e605c56321dfcc31951bc679

                                          SHA1

                                          e12bb357e4bab873f097d2c84e80d0f9aa69f546

                                          SHA256

                                          7c0348a3b5a635f724b9d996f987890540e7c992136f34bb8a5b7596696ea77f

                                          SHA512

                                          d8df564250f8621e7f4277a218de12b992dd5ef745c94b7a57f4b9c12b0799e55387d92b70f481a79768faa8746a9ffbf76dddd4a6c352df6032f385ab35d3d5

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                          Filesize

                                          288B

                                          MD5

                                          704f7c6c793bea40accfc8baba839ff4

                                          SHA1

                                          c8b2de7c4ff196bd775bbdb619dded00c12e271a

                                          SHA256

                                          88b2997f2bb38c5b5691c056864cfa5803b0b9d5943f45717f398c9e00fb40dd

                                          SHA512

                                          155c525491106add964279c0edf6e8df99e23b9b384a12ebfb734183a508849ca21fbb18f248653ae63109c8d8a30779d2589d0602162171e55435882cd47952

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                          Filesize

                                          2KB

                                          MD5

                                          ef7ab1277379733cc1371768e1d22e50

                                          SHA1

                                          20587d101e3a4415085459de0fc7494c3ad4c646

                                          SHA256

                                          3cc70c46e26a5a77e98313cf545474ac66fbefb162a5a8904cf394a4220fc020

                                          SHA512

                                          6466078de8cd0a70b78a3e14e188d2da0cbae704c67da6c2cff4e149cc42ca902a6ba90d44d50708542fbc17b8d63a7a9de2655523b52f406b9f4d14e4709308

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                          Filesize

                                          5KB

                                          MD5

                                          a8be8f271c17c325f45299d097f151e5

                                          SHA1

                                          b9f522380068ad75a332bc146d1c988fe9f17f22

                                          SHA256

                                          d86ecddbf1700969666445d3da46b6d9ee40185959c3724501d6081e2ed0c4b8

                                          SHA512

                                          2529fb2442c6a8ce0852046c447e54eeb6f4df16e4468d1214ae2be594131a0f6c2157aba559f5538a3c559909af31c0eaef60e9aa8a5ad82d707fcd75060449

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                          Filesize

                                          7KB

                                          MD5

                                          2cfe55ca54f4b5a7a974093d08558a31

                                          SHA1

                                          37f129a0bb2840edf6ede5bf5644b091d30bb472

                                          SHA256

                                          a7fa750d2613b629621a40087dbbeebbb5b49dab4b85aa3f351571fe8ead5e33

                                          SHA512

                                          b2d1b89cb825c2f027cb17393f00ba2bf56097b582f1c9b213dda08ee2dcef32f558709b5a4df7183222a4e82ef9d6b64348513d08f0c7f94a725eefad4820c4

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                          Filesize

                                          6KB

                                          MD5

                                          e6d297c4d419abde84350f150caa0b64

                                          SHA1

                                          9fd55055096dcfc60b17e9f09544d6144c9e364e

                                          SHA256

                                          6ce44b49abf8976574adedb8d9e06361453efa1518f34ac4c22c98546c2084e6

                                          SHA512

                                          4b007532f61d75fe5051ec904cb601dd0f5c6750ad2f8f9bf22d2d2c53ff74767a71dca26b1f474d0adfbd055cbfc1c65aed33fce952fbdeef568214d27ace16

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                          Filesize

                                          16B

                                          MD5

                                          46295cac801e5d4857d09837238a6394

                                          SHA1

                                          44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                          SHA256

                                          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                          SHA512

                                          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                          Filesize

                                          16B

                                          MD5

                                          206702161f94c5cd39fadd03f4014d98

                                          SHA1

                                          bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                          SHA256

                                          1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                          SHA512

                                          0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                          Filesize

                                          11KB

                                          MD5

                                          2e36f983bdd5143e55bbf2feb75e7ad9

                                          SHA1

                                          e810ae2ac82cf7ce75d84f4e5ee2bc0e1c212051

                                          SHA256

                                          bb7e3a286cf617432da716a56578af0d5cfa4cbb29f5e30022d2bad24daaa51f

                                          SHA512

                                          5c3f8e6eb02436252d2b7f016773d27730d2e81e9c61f6693b627adf3df296122053145075f0ba0287650b3b27d97a2b5e3b75ac9ace88ce058add16df3d99eb