244bc188197b135597068979edd2d1620a2f0edeb0f9b06c904c82f54aa8d6e8

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
08/09/2024, 14:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d495acbafb36a4050f20740a1919f670_JaffaCakes118.html
Size 182KB
Sample240908-r1e2wstenh
SHA256 244bc188197b135597068979edd2d1620a2f0edeb0f9b06c904c82f54aa8d6e8
MD5 d495acbafb36a4050f20740a1919f670
SHA1 862e6d775951a8199e9161d4e74aae5c2a177127
SHA512 6b51141f36386a9b6a076b104ad1f9c704057d4bc740f77944b369a307a4e75c4e27742d866fe2836ecdd5fa9b1a9720ca0cfa7e5eed5adb053920f9ff211920
SSDEEP 1536:uAPcPH6xacK8W/MPe8rVKy5xP6JEYx6LOndji6OOuDTNnrCXDiG18KPyQOKwqrZt:dSmacK/86JBq62TR2xyMhs00Zwl/sBi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3288	msedge.exe
3288	msedge.exe
4388	msedge.exe
4388	msedge.exe
704	identity_helper.exe
704	identity_helper.exe
428	msedge.exe
428	msedge.exe
428	msedge.exe
428	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4388 wrote to memory of 4996	4388	msedge.exe	83
PID 4388 wrote to memory of 4996	4388	msedge.exe	83
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 548	4388	msedge.exe	84
PID 4388 wrote to memory of 3288	4388	msedge.exe	85
PID 4388 wrote to memory of 3288	4388	msedge.exe	85
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86
PID 4388 wrote to memory of 1816	4388	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d495acbafb36a4050f20740a1919f670_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffab75f46f8,0x7ffab75f4708,0x7ffab75f4718
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,17742590972983529693,10282585983369513945,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2056,17742590972983529693,10282585983369513945,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2056,17742590972983529693,10282585983369513945,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17742590972983529693,10282585983369513945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17742590972983529693,10282585983369513945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,17742590972983529693,10282585983369513945,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,17742590972983529693,10282585983369513945,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17742590972983529693,10282585983369513945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4932 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17742590972983529693,10282585983369513945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17742590972983529693,10282585983369513945,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17742590972983529693,10282585983369513945,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,17742590972983529693,10282585983369513945,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3436 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:428

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4936

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e
MD5 d7114a6cd851f9bf56cf771c37d664a2
SHA1 769c5d04fd83e583f15ab1ef659de8f883ecab8a
SHA512 33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808
MD5 719923124ee00fb57378e0ebcbe894f7
SHA1 cc356a7d27b8b27dc33f21bd4990f286ee13a9f9
SHA512 a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 3352ad645c6bb79104401782691456a5b75d955380c8d2a95fc8031501058893
MD5 83fc3af3e2e1a738f17ba7b0b7a5ae67
SHA1 3da4d2b5f064c8e937bc9f818d996997fd6c527b
SHA512 0d550bf6cfbc30589ae4cf7cb7c216714ec30727722ed1645aff84f326b5e3c94389aee301bbfcdcb9fac67a8264813d6cd1882802524d546a8fd99c0298d4a9
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 5031d365e335802b8d8815aa4b955d536a405063400d674d49e064dd1a9621c7
MD5 3a31f0e3dad5b9705d4ea54e851ed043
SHA1 cb8d5a4ba6f7bfd20674ab045a7553643bdca8f5
SHA512 ede84844059dc2a634bf7d3b3a718fcaec02d2d5a4b1b1a6bf158653ad6fa777f2293f4fc807f0074860d812281fd4bb05aa00661a13684df039148b5153a0d2
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 64b9258db1f4ab7cbb0f3fda72621996c0457b02a06b6170af2d911850f1f62c
MD5 6830ceedb49a8ec986fc6242c34f1b17
SHA1 613a48349efd045ba069812449257277827c49a9
SHA512 f798d0106eb7e4c11e4332faeb9793ed97de11df5beec2f401819a8785cbf0bb06930fa481b5a9edff4f8b677baa23096a0f956891f5a4ea6410bcf36a92860e
SSDEEP 96:niXk/Xyy1pV8LSFhPwpvWMoiVmdeH/brPTeUWQyV+VDCziEwb:niXk/CyDVVFhPGWMXnPTero
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 93c5bf6b5723555d774b92eb8ec6a7e9db5af42b1da50905b10fa72c44aaedb5
MD5 ff4e044ab584544345175f217f5d30ea
SHA1 9b3c8ded13343a8ba38ebf5661bca17e70b95db5
SHA512 2f359d6025de94495d050d70ba4672dfed35a8a569764de16ea301cf456191650fffb6b9bdc0241a1247b064f0229f8672cb5d8bfd1a528c7170924164337c8e
SSDEEP 96:niXk/Pyy1pV8LSFhPwpvWMoiVmdeVq+zbC2/brPTeUWQyV+VDCAiEwb:niXk/6yDVVFhPGWMFq+zbC2nPTerV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 c492dc7543d41279f0280bf8ac5edd2b502bbcde891f50f6c6174c1325ee769c
MD5 f5452fab72dd9a9e1b0a8d73d531d86f
SHA1 d203a92be0f196da242a879e4e0bf792faa8c8a9
SHA512 54d97f21558ffdb5ddf42b602b2a4a6fd2696dcc88c6ec2a38ff1927b160bd20b5dd7453f5549c7377b8ec5b5c0fc3011edef2fd1c720644de33f50fe1057967
SSDEEP 96:niXk/byy1pV7gLSFhPwpvWMoiVmdeVq+zcbC2/DrPTeUWQyV+VD7AiEwb:niXk/+yDV7BFhPGWMFq+zcbC2vPTerg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 613957cc2100a9779e362a2d14c46a4b55b30b0758a1a67b9818d1aab3ec1e50
MD5 29f636102c272a5a8c39b5dee9996539
SHA1 a0157607c542ed7c1f7a4a7728663609add800f3
SHA512 1b4979d0ccf7bb443e245b1eeb4ea165fe0ed521cc455f02b03359e9a9d464d38287baaf1d0c6a9364089965735fa57b0fa64c38002e932df6b458d85608b53b
SSDEEP 96:niXk/Pyy1pV7gLSFhPwpvWMoiVmdeVq+zcbC2/brPTeUWQyV+VDCAiEwb:niXk/6yDV7BFhPGWMFq+zcbC2nPTerV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 49244930e27e18f0b575c504f6d650285364ce7ceadcf4d2d0ca0d8e9cea4217
MD5 abe79ddb3d20219925e7c97ff42f7974
SHA1 7ecdf9554b111c73c618942f0dfe46324d64da69
SHA512 6658f997c84790f216776d736f0fb037ba7dd83100d2983f5f7ddb6d5c9ff3c2550531b9fffa275f0162a79c8377c052ce13b26bcd40cd9a4857036a3fb8b044
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup7DK0ce2RUo+exNPTy6LQOu:A9iIxuERzA83h09RZxY7DK0Cx+aPTy6E
MD5 SHA1 SHA512 SSDEEP

Submit Download