a714efc243369e61091ddda1f2800cc0f8456d1abf8a4195ccfb45392a848c61

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 10:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
916a920533518b141e283cc4b52d2265_JaffaCakes118.html
Size 85KB
Sample240603-mapq7acc55
SHA256 a714efc243369e61091ddda1f2800cc0f8456d1abf8a4195ccfb45392a848c61
MD5 916a920533518b141e283cc4b52d2265
SHA1 6b25a33cd4c9c906c51f884088f41a592a37ba9d
SHA512 9d7df52823d98b5d706dff9309455095ddd04d319ab12e7f58204ea518df91d75bb8f1e3623aad20921aa4bfd896a714f84c1464dd36d80201af400ce5872459
SSDEEP 1536:2bLaq8rX1rTKyNsqvOKjG/RmzA2r5mz0PbfL4qOCXlIg:W6rTLN3OaG5or5mz0PbfL4qOCXlIg
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3016	msedge.exe
3016	msedge.exe
4472	msedge.exe
4472	msedge.exe
1760	identity_helper.exe
1760	identity_helper.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4472 wrote to memory of 3128	4472	msedge.exe	84
PID 4472 wrote to memory of 3128	4472	msedge.exe	84
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3828	4472	msedge.exe	85
PID 4472 wrote to memory of 3016	4472	msedge.exe	86
PID 4472 wrote to memory of 3016	4472	msedge.exe	86
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87
PID 4472 wrote to memory of 3232	4472	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\916a920533518b141e283cc4b52d2265_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaa37e46f8,0x7ffaa37e4708,0x7ffaa37e4718
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6080 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,14391061561819320226,4019201560380761365,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4808 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2580

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4064

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2440

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2572

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb
MD5 a8e767fd33edd97d306efb6905f93252
SHA1 a6f80ace2b57599f64b0ae3c7381f34e9456f9d3
SHA512 07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654
MD5 439b5e04ca18c7fb02cf406e6eb24167
SHA1 e0c5bb6216903934726e3570b7d63295b9d28987
SHA512 d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 ccc03d6a26a5298a86a0cca0366be8cbd632e72f16bbbd1da6bc7274e0dff0b6
MD5 50f4a1c34df5f2b2dce6628c96f5e52f
SHA1 d0ade17dfbeae3790ecba3c7b9627a9435d69c6d
SHA512 5daeafda629f9f264117b2f94dfef13e1f9f81856d5cb5f9bc3a0a2b9bebce9d4d0933f3f5a42ab6383f541c394a07c72416177e17ba83defce1c386830cfa81
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 9ae53c9f82830bbd509c41c4c5fe08a6da43f1a7eb4bd683df2877c185a39efd
MD5 72b3f7b5f26a29a1ea9507444e09624c
SHA1 11c0deb495245545214beeb7b4867eec92817376
SHA512 050b40bf054d823b5470e12a1ee8ee2f81f9b46395c9fd54699b76466a9599f3e3fa4f303bef7a2b14e75b2eab0a286e84bba9fefbcc2be52854c40e73b9eb4e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 e339c9a60cac4945d4e2c66d83db2897330d2b51fbc7cfc90a82cd088c431a89
MD5 bb4e74c6d797910114f001c27dcca217
SHA1 9dc1e4e23bf19c900ad6bc465453e0d82762d29d
SHA512 db4d806616c110fc47a663b617ce87acc374abf9be8be75ddd629455a42631a73b4123753d945246febde4394290d9b2bac4380eba0edb946cb3373ab28fa688
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 bafd7644e1bf89402db222e0ee71f14016cf513cf0922011d64dbcf34f2523b4
MD5 208c0d16e48baa3907a912d0b1f5ad19
SHA1 8bf9c2d1f17227a8acecf10cda91174855f2cc8d
SHA512 c13c336068c925ee489be869305d889e3f557955470a5f9e31df411c5af8169e5e13935147d5e2042701bee306f7fb0ddffd3712328b6caecccd8fd6e730c684
SSDEEP 96:nVkxO1VJamwpvWMoiVmdeHBrzYUWQyV+VDCziEwb:nVk4DJamGWMXSro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 93011aba150146c266d8d9be6619422f0cc9a797065b7d1832d1521e60b5405b
MD5 baa5017380587f01d0f65b7c334e7ea0
SHA1 c74c73a4c029977288c98798e7ba59cc387b9a6f
SHA512 11dfe90433f2e1f84a2b238024561c0319e4f08063fcdcade283f808c55f73890dcd73bb020f3a239a4dcf2d623165c34bf1b266d14b847467ecf58d48226a71
SSDEEP 96:nVkjO1VJaUwpvWMoiVmde7zE1wErWJp4Sv2BrzYUWQyV+VD7AiEwb:nVk6DJaUGWMLY1wErWJp4s2Srg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 384b94bf0855471c9deefe709c6a038d34302b6ae60beaeca99423394d9d7130
MD5 ced52bec0a4a496664b055efe61d0e6b
SHA1 c2dec4f5474793535611d59c113013474c77d904
SHA512 936c292f7d6357bc8ebab449fc370a5ad42c1dff0c60f6e1dfc5824ccb749b670d7a3e9fa6620506ed3b390d1a96c7df7b5b8f1138d7fd80194db8b17fc191c6
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupzqHqe2RUTMj2B3z2OMDCRe:A9iIxuERzA83h09RZxYzqHkdyBaOMWRe
MD5 SHA1 SHA512 SSDEEP

Submit Download