4c38cdc36c2fd5ace05147c6690f076cad61fc356f8d1f82ec0c615008a3ff30

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 12:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a579a4ad0c0039190e68466e9904cd0f_JaffaCakes118.html
Size 22KB
Sample240613-pdfzkascnn
SHA256 4c38cdc36c2fd5ace05147c6690f076cad61fc356f8d1f82ec0c615008a3ff30
MD5 a579a4ad0c0039190e68466e9904cd0f
SHA1 16b2800e2e7d3b0db2a9de313073fa565182adde
SHA512 a3f95d0f4d2be768b875e73bd20dbaebba751f354adae48b3cbe5b6a4fc395acb7fed648fd15c3953613a6196a959b4536aed3d97c171a412f2ebc90bd9716a7
SSDEEP 384:SIZBHIyIk12JuZ4yn8XuwWSu5YnznKfVTV6qzCeByXousJc1uUz:SPkq44yn8XRWSUGOxVY0vsuUz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2140	msedge.exe
2140	msedge.exe
748	msedge.exe
748	msedge.exe
4108	identity_helper.exe
4108	identity_helper.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe
748	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 748 wrote to memory of 1200	748	msedge.exe	82
PID 748 wrote to memory of 1200	748	msedge.exe	82
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 3932	748	msedge.exe	84
PID 748 wrote to memory of 2140	748	msedge.exe	85
PID 748 wrote to memory of 2140	748	msedge.exe	85
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86
PID 748 wrote to memory of 408	748	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a579a4ad0c0039190e68466e9904cd0f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd4eee46f8,0x7ffd4eee4708,0x7ffd4eee4718
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,409560571516801593,9255182330429788185,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,409560571516801593,9255182330429788185,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,409560571516801593,9255182330429788185,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2972 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,409560571516801593,9255182330429788185,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,409560571516801593,9255182330429788185,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,409560571516801593,9255182330429788185,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,409560571516801593,9255182330429788185,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,409560571516801593,9255182330429788185,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,409560571516801593,9255182330429788185,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4024 /prefetch:1
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,409560571516801593,9255182330429788185,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6048 /prefetch:1
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,409560571516801593,9255182330429788185,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,409560571516801593,9255182330429788185,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3988 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4988

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1368

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:404

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c7658f407cbe799282ef202e78319e489ed4e48e23f6d056b505bc0d73e34201
MD5 dabfafd78687947a9de64dd5b776d25f
SHA1 16084c74980dbad713f9d332091985808b436dea
SHA512 dae1de5245cd9b72117c430250aa2029eb8df1b85dc414ac50152d8eba4d100bcf0320ac18446f865dc96949f8b06a5b9e7a0c84f9c1b0eada318e80f99f9d2b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 66f8d413a30451055d4b6fa40e007197a4bb93a66a28ca4112967ec417ffab6c
MD5 c39b3aa574c0c938c80eb263bb450311
SHA1 f4d11275b63f4f906be7a55ec6ca050c62c18c88
SHA512 eeca2e21cd4d66835beb9812e26344c8695584253af397b06f378536ca797c3906a670ed239631729c96ebb93acfb16327cf58d517e83fb8923881c5fdb6d232
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 d734cbcd582966ab6a4dbc45ad68b5bc1e66068384b853847cd536401188124f
MD5 773786b055c4fe6ef749950a9b030ef6
SHA1 14be5f5eb432318595ade008eb2b3309a622fb17
SHA512 da7daf6b12acea2bf380236b3d7425e43c29d8a1bc753239e75a5ab2c351f7ca6424c854a391c564dae1f8e70ecfd907b8a20cbd81d002670934bcbec8bf0c90
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 696B
SHA256 0019a54ca1dd6fa8441c36f09a650fbb2842f2ac8559d84557b30c80b30aa855
MD5 a025cb146a6d27179d4e90d3fd197dd4
SHA1 f770d7e900192a4340c304376840aca0c79787f9
SHA512 4e55af0ca41906b7bf1a348b0654e9a4db984b6a9f8de1d9cb3d5ed17567e9b907c454138f3ff9ffdb3241479ffdf6149d7153e5a4e3724d4bbe59a6c0ad2347
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 8eb983dc68963fc0f81e1b5f1ba54b9bbc8beb42fe2c69d75b7ac71c986ddc8d
MD5 7b267aa8b331a11c2616910aafd2ac3a
SHA1 2a7d656bd2329e926e379d91513e72dee5585f3c
SHA512 ff2992d8161c02d17da010b15f45c22d9c05429476efcb097cf8159e776ec3eb4ab8da0d5fa5985655aded69783a2d7985b0684e0a001096f7a4e66a6605ca87
SSDEEP 96:nwlk/oxm/DQYmqAI1vCmwpvWMoiVmdeH1DVWdwUWQyV+VDCziEwb:nwlkBIBI5CmGWMXzmwro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 aee28a1eb58b2651852a98eee1a024858d7388831349365fad98adc6da197ea1
MD5 f0eb9266370e651704c9edbcf38bf63f
SHA1 191ad5c86e11ae3d8e123dcfe571daee98a6fd1d
SHA512 68f4d862255523e7c5ebbecad3fff78764a987cd3778f0eb292405839e34c18de7be0a53106ccd562848f9e8f237b51184529ee783532acbca0d4a82d69d2810
SSDEEP 96:nwlk/oxm/DnmqAI1vCmwpvWMoiVmdeENESEDTZ21DVWdwUWQyV+VDCAiEwb:nwlkB6BI5CmGWM4ESEHZ2zmwrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 28ec657f19950e354466003ba7c14f367fa6ce91d80b81088fb87d586e54b8aa
MD5 18eaf08eb840a9f737ffcc795e61d1cc
SHA1 f983e61fd8489ca94274e5c740b5378241e6234b
SHA512 4289fe4f72177e4f124a7e4c58658e0159edeb4d0e9ed8e99c0fe41a691aa3483946dcb1c8c42c092c0f4582b74252c8133f85354078decc8f6f6a1de8a26455
SSDEEP 96:nwlk/oxm/DnmqAI1v6mwpvWMoiVmdeENESEDTZ21DVWdwUWQyV+VDCAiEwb:nwlkB6BI56mGWM4ESEHZ2zmwrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 372B
SHA256 573d191fd77229da4c00feacbe97e0f5de1b2e1e8c8fedb7d622d95cb0b20cab
MD5 0f4e7d715bf2a2d02b073ff098712cb4
SHA1 064a8a2c1ad7317f2737ce2fbbb7cbda480b20d7
SHA512 dbebf4f5cb11f2f7ec57a15b87681bf5dac0696a2c4191f53d561c9eb42524f9bec419867e519537fb5d24edfb41de6eecbff1dbb7e145ae4a6a64028c2d726f
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe587bd2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe587bd2.TMP
Size 204B
SHA256 9c1ea650f2da542ea2990e4fa0125d75e2dc67a90a6ade7cd35396f09c3ca6e0
MD5 102fd57ff831cc7d1fa0e8cb53a8f1fb
SHA1 ea63a495a0f20bfe07e7f2271cdc8751c6fc06f8
SHA512 4b855a807da9df6911849a664efc14dc2b281040dd52742d9c93d5654d74c8574b38758811ca7533d59021f095a055230bf098182de458bc1c8d394c5472e630
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 d6a68da4ee5dfa059ebc9a4e9c758329e01fac4c8c87c828b97c13a0dfc137a2
MD5 1181705d65b24d52586364edb3be55cd
SHA1 fb63385c870622a67f9a3796658def44045131ea
SHA512 eb06b098708ff9015608ec356fd74c824c157fa3735a974ccbe839bdabf99e508d0b3d4982520f9125dee434599c388998e51f8dfdbadbee4178ae09250f467b
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupLX8e2RUmvvjSRsRG3z2OMA:A9iIxuERzA83h09RZxYzijvvuGRGaOMA
MD5 SHA1 SHA512 SSDEEP

Submit Download