10e23b2955c4d51bc07e2f0f67b5efd2e2bda1dfbb1616a64774e58b59bb875f

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
14/06/2024, 07:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a8865342ab799d90a62301ee6d15eca3_JaffaCakes118.html
Size 157KB
Sample240614-jap56szerf
SHA256 10e23b2955c4d51bc07e2f0f67b5efd2e2bda1dfbb1616a64774e58b59bb875f
MD5 a8865342ab799d90a62301ee6d15eca3
SHA1 8d90669973e730c42f72fe25b85baa0dd419cf03
SHA512 e495215f44a860954ef1478cd2d0763cde8304b09e543767a95598952477f70de80eef079b7c1994dbf3180afdc9df2a77156ed743f77d320db470282b1ad44d
SSDEEP 1536:K6Ob+9V1a7RvU2111f1p1F1p161781q1Y1q1g1R1D101D1+1Z1c1Ls1c1d1Yx6mu:K6OS9ba7RvIgygcbh/Oh2X+f1uquNzl/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4712	msedge.exe
4712	msedge.exe
2460	msedge.exe
2460	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2460 wrote to memory of 1392	2460	msedge.exe	81
PID 2460 wrote to memory of 1392	2460	msedge.exe	81
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 3104	2460	msedge.exe	82
PID 2460 wrote to memory of 4712	2460	msedge.exe	83
PID 2460 wrote to memory of 4712	2460	msedge.exe	83
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84
PID 2460 wrote to memory of 4552	2460	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a8865342ab799d90a62301ee6d15eca3_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdabb846f8,0x7ffdabb84708,0x7ffdabb84718
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,10899989878955641572,12523412186869056965,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,10899989878955641572,12523412186869056965,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,10899989878955641572,12523412186869056965,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10899989878955641572,12523412186869056965,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10899989878955641572,12523412186869056965,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10899989878955641572,12523412186869056965,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10899989878955641572,12523412186869056965,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10899989878955641572,12523412186869056965,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10899989878955641572,12523412186869056965,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,10899989878955641572,12523412186869056965,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,10899989878955641572,12523412186869056965,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5160 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:552

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3376

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1936

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4600

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 e6bbd4933b9baa1df4bb633319174de07db176ec215e71c8568d27c5c577184d
MD5 477462b6ad8eaaf8d38f5e3a4daf17b0
SHA1 86174e670c44767c08a39cc2a53c09c318326201
SHA512 a0acc2ef7fd0fcf413572eeb94d1e38aa6a682195cc03d6eaaaa0bc9e5f4b2c0033da0b835f4617aebc52069d0a10b52fc31ed53c2fe7943a480b55b7481dd4e
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 2ebd5229b9dc642afba36a27c7ac12d90196b1c50985c37e94f4c17474e15411
MD5 b704c9ca0493bd4548ac9c69dc4a4f27
SHA1 a3e5e54e630dabe55ca18a798d9f5681e0620ba7
SHA512 69c8116fb542b344a8c55e2658078bd3e0d3564b1e4c889b072dbc99d2b070dacbc4394dedbc22a4968a8cf9448e71f69ec71ded018c1bacc0e195b3b3072d32
MD5 SHA1 SHA512

Submit Download

f_000022

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022
Size 44KB
SHA256 6ae9edfc411ede03661a3d910fafddab3d6b313d1f4668dc8c5a84c5ab23a3ce
MD5 23536ccfe05b737ae639fe63ee4cc435
SHA1 6d2e9822835dc3e6117a4d2addfc8f241fbdbc82
SHA512 f416e36b2322bbebd211fd1ea69c88883f00c7b00f14474a5fcce4a408840c0d1b0304eb8941509a38157d0583485f638959eb7d5b9ae668aa88c1d3eee8dd0d
SSDEEP 768:feIhQcf4fkrTpidkiSOT+S2k9j3ulT+qZcOkgaONCHLex1RiZW+s9Ux9J6:feIhPfkgFiiPk9j+EM5XCHLex1Rp/UxC
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 414e1fb2a25ba75a28ebc11457b5948f6461ddf8eaa45c51dd5cb6423db5fb7d
MD5 eb9657cb7b7f5e6a4f3cd2e58c765c10
SHA1 303b005364fbeff90c65d07938d5c4cc213dcc46
SHA512 7f7bca283cb95b6cd5674441c440588b10ac90a456e3f8d414427aa80afb7488fe667ac5bda9b85ff3984cf561a6ae36b8550036e2e4cd2d3f3a52f7a4cbe47f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 9161ba4ca0ba118db9882086c8d7cbee020146f4bb18f5477c0f5b97ba23c1ef
MD5 11508c43b4e2051929cbacbe2ca1b8fa
SHA1 4861b3a5bbdfc1f68375a986f0cb0a96ce9d06f2
SHA512 983bf1422ebb41585dcffa3944578ecc7691fe928f1dc3a8d4dea11d522da84dcc2ea4786688ec7362ef3ed7470d5fe7d4ec2ebcdc23ac335aff87f011a36878
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 9f55d3c84540d890366ada3dcff189adcb4c98c841e29a2381becb6cddd95a6f
MD5 dafe5a3e15565ee909eaab0cb2ae86d9
SHA1 19a12719fb2be9c2b4948784ece6229402e0ae3f
SHA512 d509439061ef710c6cf1390602a2beccb0737b6df59e8ddcaad3a62d9970ea5de81dcaa0fd9a66be1da30813680eeead144f481f38a6b4be1cb7d6132113a2f3
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 ef48ffd09a0874529476c92ea2a98b62ad2b276e37764aaa8dcca90fe463e431
MD5 c9d397c4e74990d3eac6f3cb5fe33712
SHA1 7ed09b586b7e971e6d7b40cd4aaabd65682dd23a
SHA512 d50c6ad5b26eac93de7da47e57cfd55bdacf9a74dc9a6baaa4dfe75d0e8a967bbfc9e8827166790dc2eea47f697cbb319ac129693409b31321e833799c93d4a7
SSDEEP 96:nh3kBoxm/DQYmqx91I/wpvWMoiVmdeH2WfctPUWQyV+VDCziEwb:nh3krIg9u/GWMXMtPro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 650d11111848dbca2583f17a9f701e811376fa69f37f0c631ceac82d3408664f
MD5 571dacb3819f3c5d7eceb18608fb44a9
SHA1 7f769e810017b125d78c653aa4478ec8abbaee8f
SHA512 ba45a5324f38bd499749d44c5e25f61c3e8a12674e26550b3db327c632a96c3e8ad9035109766f72d53b75ff85959cf193078c3aaa70ba7a18dc35af92520b87
SSDEEP 192:nh3kr6g9u/GWMbRaeIlV/Xem37EYjP72Erj2EdLM22MtPrV:nh3+9u+Wssh/f7r/jD/rj/dA+tR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 cb4b689b71d0da6b0edb5ab8cb6b9f4a4667740186e9c96618a9ab73555a35f7
MD5 ecba3a972c216561d246008d6dd2a082
SHA1 f557b1ebbdfb1e19394c873b04df06e5a6f0db31
SHA512 825d6f0c5eaa504f9ed883d8c9b0c1cef07c8db82b10051e53a640ffda9d56d28fadde5d57ea9bff7a89b915330c53452f8f7aefbda3edb0b9e56c6975216d4b
SSDEEP 192:nh3kr6g9uXGWMbRaeIlV/BXem37EYjP72Erj2EdLM22MtPrV:nh3+9u2Wssh/d7r/jD/rj/dA+tR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 7cdcb7005f40d21ad32c8b8325ee9cfb59cc4cff06d96ea8097dce363870ceb9
MD5 f3ed2163e2eb7936c4c682f8b7f6d3ea
SHA1 26870253077941c4ac2fd2755b2d5c0893db8fa0
SHA512 e7721dbf207e26f66d89b6159fe586d0b6a01f106ea0d8d70da7c2a727d681fc675b749482e4697e4223e1cbf2b46f49bb4b1b3225e8f86cc02f46e8cb582a3d
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupWHfFV5e2RU35lh/wbT3z2g:A9iIxuERzA83h09RZxYMdVtC5zwbTaOR
MD5 SHA1 SHA512 SSDEEP

Submit Download