7af5570f690da707bd9e927c69dc45af4aaf89589f61106565ade98b511a6a1d

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 15:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9233067b79d6992a5184035575b3485a_JaffaCakes118.html
Size 49KB
Sample240603-sd7dasac7t
SHA256 7af5570f690da707bd9e927c69dc45af4aaf89589f61106565ade98b511a6a1d
MD5 9233067b79d6992a5184035575b3485a
SHA1 516220ada81ab8f1a890efafa2a9343a7b8ab6f9
SHA512 c4f07a853329fb85d379b1be04a03dd6f5cbbe4bafdad245652209b81a7702fe147de519977ef5e0953d5d0cc8591c90a90c910afe7a40599eed6ed757e429ec
SSDEEP 768:s1BcHRU47JpwuZsM25IjIL+Jczs/fXD01u9YP52xrv1Rw7x:SBcmoJpwdZ5wkcoX1uW91
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4532	msedge.exe
4532	msedge.exe
872	identity_helper.exe
872	identity_helper.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4532 wrote to memory of 1356	4532	msedge.exe	81
PID 4532 wrote to memory of 1356	4532	msedge.exe	81
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 3024	4532	msedge.exe	82
PID 4532 wrote to memory of 4952	4532	msedge.exe	83
PID 4532 wrote to memory of 4952	4532	msedge.exe	83
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84
PID 4532 wrote to memory of 1324	4532	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9233067b79d6992a5184035575b3485a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff942d846f8,0x7ff942d84708,0x7ff942d84718
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1536,15218512408224884346,8166905322374060524,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1536,15218512408224884346,8166905322374060524,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1536,15218512408224884346,8166905322374060524,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2880 /prefetch:8
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1536,15218512408224884346,8166905322374060524,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1536,15218512408224884346,8166905322374060524,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1536,15218512408224884346,8166905322374060524,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4872 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1536,15218512408224884346,8166905322374060524,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4872 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1536,15218512408224884346,8166905322374060524,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5144 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1536,15218512408224884346,8166905322374060524,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1536,15218512408224884346,8166905322374060524,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1536,15218512408224884346,8166905322374060524,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1536,15218512408224884346,8166905322374060524,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1440 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2464

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4804

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4624

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

77EC63BDA74BD0D0E0426DC8F8008506

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Size 70KB
SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
MD5 49aebf8cbd62d92ac215b2923fb1b9f5
SHA1 1723be06719828dda65ad804298d0431f6aff976
SHA512 bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
SSDEEP 1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

77EC63BDA74BD0D0E0426DC8F8008506

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
Size 328B
SHA256 2e25ddb02fd71f027e502dc3c5bd01f53531f7b6b104ae5bf6cf90f0f947e198
MD5 7c947fa37ad60d76d48d4055c44645fc
SHA1 32d9ff8dcc96e01c84a864ec1f56ed3a7272940a
SHA512 0c009d0d73486ad31f55c74712107d7601d4b09b32f9aeda8724ebd38319a25f4876527cac04af3f0567fd9dca8e9f9f241e005e279ced3816bf0ffe41ecb761
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 f65058c6f1a745b37a64d4c97a8e8ee940210273130cec97a67f568088b5d4d4
MD5 1ac52e2503cc26baee4322f02f5b8d9c
SHA1 38e0cee911f5f2a24888a64780ffdf6fa72207c8
SHA512 7670d606bc5197ecb7db3ddaecd6f74a80e6decae92b94e0e8145a7f463fa099058e89f9dfa1c45b9197c36e5e21994698186a2ec970bbdb0937fe28ca46a834
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 2dc0bf08246ddd5a32288c895d676017578d792349ca437b1b36e7b2f0ade6d6
MD5 b2a1398f937474c51a48b347387ee36a
SHA1 922a8567f09e68a04233e84e5919043034635949
SHA512 4a660c0549f7a850e07d8d36dab33121af02a7bd7e9b2f0137930b4c8cd89b6c5630e408f882684e6935dcb0d5cb5e01a854950eeda252a4881458cafcc7ef7c
MD5 SHA1 SHA512

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
Size 21KB
SHA256 faeb9cfa44221602b4b0d670b5cebd94019678b9d5b727e4319cff43cedbebd2
MD5 8fee6ec02f81aa6bb1c06562cb2c5dd6
SHA1 cf2238933e2efa0f1e175cc6c0d6c7cc0fa0d9f5
SHA512 ba2ee298f98576c04a57376e9c41e05c163595cc3623ab09303bff4982c251496791be4de02f1c4614382a7d064377387b67f9f53795a36b277e942926803ce1
SSDEEP 384:kApd3Yj7iCApd3YtnYItqYNg7EHragqvttHC:k2+7R2+kYygMvtti
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 964B
SHA256 c4abaaaed57d84951b1bd864d1da54cda9623952bbc389750a46641910ebfd82
MD5 35cd8998bae880eb1002a27c1bb693e7
SHA1 7eb17a44ddb5cb74474fd312002a3382a40e0220
SHA512 abe4e2ebd4c1a199edff1db2265d23d7a8becffab2e1c2cf1d17e5f561495168cd048c10dd0153bb1643d7db8fc8282151940853c965744a4a4a6bad97a6eabf
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 f5b37c77264819b73a65a94a2784adac1c448bc7c4a5208cec1a5543e8ae1af8
MD5 c98a48474b7f9c2b9971628229a701b8
SHA1 0ab12cafd5927904d24dca8fe740cfbaf56f30b3
SHA512 0db54f1c29b45362954bec94085cf3d4940481aaf188e8e0330783e569f11bbb4362085f97544470abbf073f6800447b609b581288865593ede9da4612d26317
SSDEEP 96:nRFk8Bc1lega9IQwpvWMoiVmdeHpCrmbFUWQyV+VDCziEwb:nXkv/NaCQGWMXpJbFro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 035d1705e5538798bc05c717fe89772b8275377d0e692c868fb422ebef1403b2
MD5 1a1488d0760455486de573198cf94d23
SHA1 86a17206361afc743ac44f2fb46329466c61af5a
SHA512 7e23386b67df2dcb47a45f38715b93c1e1de812af7bc3888d72d3bc82b3de1ffc4163581ff2279ee90bc8cbc6ba654bd0f77e2c16d7ee2ca678e5955e35b99e4
SSDEEP 96:nRFkHBc1lega9IQwpvWMoiVmdeZCv2pCrmbFUWQyV+VD7AiEwb:nXkq/NaCQGWMJCv2pJbFrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 8e9959a85645e63ba61091d56249614c9f834420e276708dcfe19052f64a4c8b
MD5 9b62f60ffed7036c472650166b0425b0
SHA1 dab3693656a0f7ae485d2dc9b1977b92afe5ea43
SHA512 b61d43efb4e2971edbf801619d67fc9740734204604c262b44ff8d98d5ca6b2048f5c410af4e9ebd60e8937fb8eb1ef825dd2460e82ed016e6060f8c5cc25a94
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup9Zk+e2RUfjf7Z73z2OMDCy:A9iIxuERzA83h09RZxY9ZkgmzZ7aOMWy
MD5 SHA1 SHA512 SSDEEP

Submit Download