4f2169f2fe8ff96f06d2e3015110259e451d103c51e28848dc9af51b43c0dec3

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 10:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
916ce5cd9ae367eb2b6ccffce8c988c2_JaffaCakes118.html
Size 37KB
Sample240603-mc1apscd29
SHA256 4f2169f2fe8ff96f06d2e3015110259e451d103c51e28848dc9af51b43c0dec3
MD5 916ce5cd9ae367eb2b6ccffce8c988c2
SHA1 c765bee3c416a2295dc971c232915dd4a6029a24
SHA512 c670c3ecfc0d7401826bd2582f190f133fd18f20f80b0f3c58c174c303e820ba4d6f0aeebd6165e6ac0b507d844157eb95dd25da16f96d259d5dc9fef561275e
SSDEEP 768:B4FQW81D4RA+vEOjz6rdG2Gil54RZfPGnf3Gu34aKi6t81DdRA4vEOjq6h8aRlR9:GFQW81D4RA+vEOjz6raA7Iahg81DdRAW
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1028	msedge.exe
1028	msedge.exe
1620	msedge.exe
1620	msedge.exe
3264	identity_helper.exe
3264	identity_helper.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe
1620	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1620 wrote to memory of 4772	1620	msedge.exe	82
PID 1620 wrote to memory of 4772	1620	msedge.exe	82
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1220	1620	msedge.exe	84
PID 1620 wrote to memory of 1028	1620	msedge.exe	85
PID 1620 wrote to memory of 1028	1620	msedge.exe	85
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86
PID 1620 wrote to memory of 3676	1620	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\916ce5cd9ae367eb2b6ccffce8c988c2_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd8a7946f8,0x7ffd8a794708,0x7ffd8a794718
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2228,5368445140896436616,1270811343055341465,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2228,5368445140896436616,1270811343055341465,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2228,5368445140896436616,1270811343055341465,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2736 /prefetch:8
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,5368445140896436616,1270811343055341465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,5368445140896436616,1270811343055341465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2228,5368445140896436616,1270811343055341465,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2228,5368445140896436616,1270811343055341465,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,5368445140896436616,1270811343055341465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,5368445140896436616,1270811343055341465,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,5368445140896436616,1270811343055341465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5312 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,5368445140896436616,1270811343055341465,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1900 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2228,5368445140896436616,1270811343055341465,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4796 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3568

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4556

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:832

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 704dd4f98d8ca34ec421f23ba1891b178c23c14b3301e4655efc5c02d356c2bc
MD5 4f7152bc5a1a715ef481e37d1c791959
SHA1 c8a1ed674c62ae4f45519f90a8cc5a81eff3a6d7
SHA512 2e6b02ca35d76a655a17a5f3e9dbd8d7517c7dae24f0095c7350eb9e7bdf9e1256a7009aa8878f96c89d1ea4fe5323a41f72b8c551806dda62880d7ff231ff5c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a7abb51435909fa2d75c6f2ff5c69a93d4a0ab276ed579e7d8733b2a63ffbee6
MD5 ea98e583ad99df195d29aa066204ab56
SHA1 f89398664af0179641aa0138b337097b617cb2db
SHA512 e109be3466e653e5d310b3e402e1626298b09205d223722a82344dd78504f3c33e1e24e8402a02f38cd2c9c50d96a303ce4846bea5a583423937ab018cd5782f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 572B
SHA256 034572166cee8c0b5dbdc749217c3daa0b248a73e9714436112689ba541c4164
MD5 51c6124433150223db962c747cc3125e
SHA1 86c57e70f9302b9c1ad841422c1f25857c99781c
SHA512 14677e9bc6ae39a2c03508749f17aa99483652d6e576e37f7f650afeacd81b2c687bc890b3387c57f419688ec2e66d0e6e598e54f4a2c3f86d284695543671e7
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 b8134335fe31b72fe27486be6b54a25ee7a6707678d0d93822cd4eee67d2a933
MD5 a822519cdf67da0cfe5016d61b8393a9
SHA1 70f4e477b4c80e9574e88ffee2ad437685c88bc3
SHA512 0ee60aaa31e070d66c60c25f8cee0586ea44f60c4cbef4ee178712cc05746932fec6215eb7024bca0f5ecae7e74b4242f793f1f5ccb8401bc3265055701c9302
SSDEEP 96:n5kOv1L0z3XwpvWMoiVmdeHp1kFlAFUWQyV+VDCziEwb:n5kcR0bXGWMXpQlkro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 b87b7c7dc09ae721ee75c1a4fff21b0cdd40b2b0e64e116d672653f360b60b18
MD5 27358430e26a0489b17498892a8637d1
SHA1 2f5d6122c036b5a8755cffce28acf838d0459a83
SHA512 f7319e100d524ec4687df3f2b76cccc407796e1da38889dcf5fcd81634bb7395cd64d894c9408f73d150dd5f4f9054dfb65378641a89d16c432172f1b027adc2
SSDEEP 96:n5kFv1L0z3XwpvWMoiVmdeAqp1kFlAFUWQyV+VDCAiEwb:n5k9R0bXGWMQqpQlkrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 f9bd52a8386a6b4e4f11b4a48e2c24acf2843daa6b020921f25be57220f96b00
MD5 4c1d5669e745195b3e2cb0e2510b39b6
SHA1 427dcc5057c072d2c93c64599cdd2a5a6fb71b16
SHA512 d5a422fafcbc3b112c2f7a06bc5f0b72b50fbd7e0a73ec280c292dd08e76c72cc4bd26cf16bf1207d930dbc0d70e47c9d6061eaccd1e553619d578c0ce6c71c8
SSDEEP 96:n5kFv1L0k3XwpvWMoiVmdeAqp1kFlAFUWQyV+VDCAiEwb:n5k9R0wXGWMQqpQlkrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 a14a7621586306b996b48ea8ea427493acd5d327f0b0f7fba6c0ce6226881895
MD5 11ece79f33682b230086859036e5e21e
SHA1 c72bade8a4c1f4bbb99a94e03344c3745272555c
SHA512 0e3e9481967d59a1178d9908ca467be374aa4a8ec7f86c648c690817a92424da84a7782e64da9341436b3e4480f7c2031feea9d2d56b485999f714e090561fe2
SSDEEP 96:n5kiv1L0k3XwpvWMoiVmdeAqp1kFlAFUWQyV+VD7AiEwb:n5kwR0wXGWMQqpQlkrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 59dea96d3b277714a2ec01d20a2e6205cbd96d44583d925b660c1d0a9a009448
MD5 75a68afb431236a26dcf985fe54e5adb
SHA1 c14f921a85b75c01985491cd213f7b9d2c834236
SHA512 731868e25b18455746ac0904fdf1e2dc316b7c7356fbb3063445267a641a1cc6e8001dd5203750cd9f8928da26ac73c793cb53a7cc103b0580f50edd86b439a0
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup+7ge2RUEho5s3z2OMDCRHh:A9iIxuERzA83h09RZxY+iPqsaOMWRHqo
MD5 SHA1 SHA512 SSDEEP

Submit Download