7f5b62ab45dafe03643b9ad3d063bc0d6f346890ccd778b97423616a78ba1f07

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 16:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9267357afa85f79471d5ab2b89e47831_JaffaCakes118.html
Size 17KB
Sample240603-tn86baca2v
SHA256 7f5b62ab45dafe03643b9ad3d063bc0d6f346890ccd778b97423616a78ba1f07
MD5 9267357afa85f79471d5ab2b89e47831
SHA1 3e8380d1227e07eb922cc3876e3d044c28b5ffcd
SHA512 13db657a626ab4851d57706861f26bb644f467432d55a5a204ef3f64162aa4ba9edc1db01ca3ed71f2b123fd9419ca4d084b71e545134a33323024fdc5e7ed08
SSDEEP 192:S0NCGiw9Ty2gfablkWpY05FlQiExs/qyhCcV2ivdzrGRPYBfCLg2Iau1tzK9GIIM:STs9Ty2gfieWpY05MxOz+5o8m15A
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2120	msedge.exe
2120	msedge.exe
4588	msedge.exe
4588	msedge.exe
2316	identity_helper.exe
2316	identity_helper.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4588 wrote to memory of 5076	4588	msedge.exe	82
PID 4588 wrote to memory of 5076	4588	msedge.exe	82
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2748	4588	msedge.exe	83
PID 4588 wrote to memory of 2120	4588	msedge.exe	84
PID 4588 wrote to memory of 2120	4588	msedge.exe	84
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85
PID 4588 wrote to memory of 4108	4588	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9267357afa85f79471d5ab2b89e47831_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9a1dd46f8,0x7ff9a1dd4708,0x7ff9a1dd4718
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2928 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,14912113370185154481,8410453566854932989,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4988

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1200

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3532

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f
MD5 537815e7cc5c694912ac0308147852e4
SHA1 2ccdd9d9dc637db5462fe8119c0df261146c363c
SHA512 63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513
MD5 8b167567021ccb1a9fdf073fa9112ef0
SHA1 3baf293fbfaa7c1e7cdacb5f2975737f4ef69898
SHA512 726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54
MD5 SHA1 SHA512

Submit Download

251d0d75-cf12-4eff-bb05-47e886ee81f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\251d0d75-cf12-4eff-bb05-47e886ee81f4.tmp
Size 5KB
SHA256 79cb967fdeb39b311f0f8bd8f974e4ce58913a10693dd6c95280dbfa6bc6f506
MD5 e13b23a47a451620172ae97e39937c1f
SHA1 24b87fc860b0a9a7d763790aaf81ed8c2f3110c6
SHA512 9b63b2797e69e9e42043e91e9d149ed31a52a6d25729f38d52674040403db2ff21957054b0ac14220062c8e4230d98bba3b150e7c5157974be0a4b2d43fbeb88
SSDEEP 96:nUkMt1iD9wpvWMoiVmdeHpRQG0bUWQyV+VDCziEwb:nUk0ED9GWMXpv0bro
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 b57d75762d7ea1224ec8924d247f1669f2f5e7d3f2229a89bab6b08736847b4f
MD5 974a7472bf1d267f0390a492270ad29e
SHA1 183e225fe57b322c6f04d999529b48bef262756c
SHA512 cf82fdb4dec547680cf33cfc41afe35404ec3e5e786f5dc6706a513863c7a2b9d33c050695fdf44a4fb14525e01f9c082ccbf3f2bbc620d567663eab685c4781
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 d55d7628e6f062d9ba09cbe5d27381c1760f94c767485b70f25bf1395a1f5af5
MD5 26d1e647237230309b036cc236caf608
SHA1 18847e1ae0079fd78951a9bf5c36da9ef9913848
SHA512 755c93bac76f16265f32e093ffcdba9b8583bdfecdcc984f9ad87e776ab6a460908b93e8547a3269e5532071ec4e0eac89f490d4cbeb008248af4edf895bd328
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 aabdbe7d82d4c618e0fc4aa4de28da6bed84d28b186a849449c8009c928d593a
MD5 fd4af1627ef7fc6226d8f6306728fc2e
SHA1 f324f1cbe62369f1e74cfe9e746b82f0cac0de74
SHA512 8ac0529ac7a90d07b760b4d0b3fabef88f4a7eb65b90c820e85a91e8d9230962b93351000e776b9684047cde4d288efb3d66dee4261007e8ce551cdbb7b7ca58
SSDEEP 96:nUket1iz9wpvWMoiVmdeMuxzErV8zK2pRQG0bUWQyV+VD7AiEwb:nUkuEz9GWM8uxYrV8e2pv0brg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 bd2d6f19facfa75d2161f8fb2bb1cfab801ad8d6da02ffd03aa91bc11a286bbc
MD5 ddbf2414eb77fc24a66508a800e08e92
SHA1 afc703cfc9823d5205d154872563257716bcbcf0
SHA512 a30ba66d7d583eb4d0dbd274854ca04123b411d1ea3f0a6a5de8b35e754b4a752117e908ceb9cd797e2c797628421bdcbc57014f7d33828d59a80c617e491d6b
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupa+e2RUPqTH3z2OMDCRHqlK:A9iIxuERzA83h09RZxYagbHaOMWRHqlK
MD5 SHA1 SHA512 SSDEEP

Submit Download